PT-2009-4118 · Novell · Novell Groupwise

Publicado 2009-05-26 · Atualizado 2017-08-17 · CVE-2009-1634

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Novell GroupWise versions 7.x through 7.03 HP2 and 8.x through 8.0 HP1

Description: The issue is related to the WebAccess component, which does not properly implement session management mechanisms. This allows remote attackers to gain access to user accounts via unspecified vectors.

Recommendations: For Novell GroupWise versions 7.x through 7.03 HP2, update to version 7.03 HP3 or later. For Novell GroupWise versions 8.x through 8.0 HP1, update to version 8.0 HP2 or later.

Exploit

Correção

Identificadores relacionados

CVE-2009-1634

Produtos afetados

Novell Groupwise

Referências · 9

• 🔥 https://exploit-db.com/exploits/33007 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1634 · Nota
• http://novell.com/support/viewContent.do?externalId=7003266&sliceId=1 · Aviso do Fabricante
• http://securityfocus.com/bid/35066 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1634 · Nota de Segurança
• http://secunia.com/advisories/35177 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50688 · Nota
• https://bugzilla.novell.com/show_bug.cgi?id=472979 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1393 · Aviso do Fabricante