PT-2008-2921 · Microsoft+1 · Windows+1

Published 2008-03-18 · Updated 2017-08-08 · CVE-2008-1330

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions 6.5 before SP6 Update 3 Novell GroupWise versions 7.0 through 7.0 before SP3

Description The issue allows remote authenticated users to access non-shared stored e-mail messages of another user who has shared at least one folder with the attacker. This occurs due to an unspecified vulnerability in the Windows client API.

Recommendations For Novell GroupWise versions 6.5 before SP6 Update 3, update to SP6 Update 3 or later. For Novell GroupWise versions 7.0 through 7.0 before SP3, update to SP3 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-264

CWE-200

Related Identifiers

CVE-2008-1330

Affected Products

Novell Groupwise

Windows

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-1330 · Security Note
• http://secunia.com/advisories/29409 · Vendor Advisory
• https://secure-support.novell.com/KanisaPlatform/Publishing/732/3263374_f.SAL_Public.html · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41223 · Note
• http://securitytracker.com/id?1019616 · Note
• http://securityfocus.com/bid/28265 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1330 · Note
• http://vupen.com/english/advisories/2008/0904 · Note