PT-2008-2921 · Microsoft+1 · Windows+1

Publicado 2008-03-18 · Atualizado 2017-08-08 · CVE-2008-1330

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 6.5 before SP6 Update 3 Novell GroupWise versions 7.0 through 7.0 before SP3

Description The issue allows remote authenticated users to access non-shared stored e-mail messages of another user who has shared at least one folder with the attacker. This occurs due to an unspecified vulnerability in the Windows client API.

Recommendations For Novell GroupWise versions 6.5 before SP6 Update 3, update to SP6 Update 3 or later. For Novell GroupWise versions 7.0 through 7.0 before SP3, update to SP3 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-264

CWE-200

Identificadores relacionados

CVE-2008-1330

Produtos afetados

Novell Groupwise

Windows

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/41223 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1330 · Nota de Segurança
• http://secunia.com/advisories/29409 · Aviso do Fabricante
• http://securitytracker.com/id?1019616 · Nota
• https://secure-support.novell.com/KanisaPlatform/Publishing/732/3263374_f.SAL_Public.html · Correção
• http://securityfocus.com/bid/28265 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1330 · Nota
• http://vupen.com/english/advisories/2008/0904 · Nota