PT-2002-1407 · Novell · Groupwise Webaccess

Published 2002-05-03 · Updated 2016-10-18 · CVE-2002-0341

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions GroupWise Web Access versions 5.5

Description The issue allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter.

Recommendations For version 5.5, consider restricting access to the GWWEB.EXE until a patch is available. Avoid using the HTMLVER parameter in the affected HTTP request until the issue is resolved.

Fix

Related Identifiers

CVE-2002-0341

Affected Products

Groupwise Webaccess

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2002-0341 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0341 · Note
• http://marc.info/?l=bugtraq&m=101494830315071&w=2 · Note