CVE-2002-0341
First published: Fri May 03 2002(Updated: )
GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Micro Focus GroupWise | =5.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-0341?
CVE-2002-0341 is considered to have a low severity as it primarily allows information disclosure.
How do I fix CVE-2002-0341?
To fix CVE-2002-0341, it is recommended to upgrade to a patched version of GroupWise Web Access beyond 5.5.
What systems are affected by CVE-2002-0341?
CVE-2002-0341 affects GroupWise Web Access version 5.5 and potentially other versions.
Can CVE-2002-0341 lead to further attacks?
While CVE-2002-0341 primarily discloses the web server's pathname, it could potentially assist in further attacks if exploited.
What kind of attacks can occur due to CVE-2002-0341?
CVE-2002-0341 allows attackers to gather information that may be used for reconnaissance before launching targeted attacks.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- collector/nvd-historical
- vendor/novell
- product/groupwise
- canonical/novell groupwise
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- version/novell groupwise/5.5