PT-2001-2364 · Novell · Groupwise Webaccess

Publicado 2001-08-14 · Atualizado 2017-12-19 · CVE-2001-1232

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GroupWise WebAccess version 5.5

Description The issue allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get". This is possible when directory indexing is enabled.

Recommendations For GroupWise WebAccess version 5.5, consider disabling directory indexing to prevent unauthorized access to directory contents.

Exploit

Correção

Identificadores relacionados

CVE-2001-1232

Produtos afetados

Groupwise Webaccess

Referências · 5

• 🔥 http://securityfocus.com/archive/1/204875 · Exploit
• http://securityfocus.com/bid/3188 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1232 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6988 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1232 · Nota