PT-2009-4118 · Novell · Novell Groupwise

Published 2009-05-26 · Updated 2017-08-17 · CVE-2009-1634

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Novell GroupWise versions 7.x through 7.03 HP2 and 8.x through 8.0 HP1

Description: The issue is related to the WebAccess component, which does not properly implement session management mechanisms. This allows remote attackers to gain access to user accounts via unspecified vectors.

Recommendations: For Novell GroupWise versions 7.x through 7.03 HP2, update to version 7.03 HP3 or later. For Novell GroupWise versions 8.x through 8.0 HP1, update to version 8.0 HP2 or later.

Exploit

Fix

Related Identifiers

CVE-2009-1634

Affected Products

Novell Groupwise

References · 9

• 🔥 https://exploit-db.com/exploits/33007 · Exploit
• http://novell.com/support/viewContent.do?externalId=7003266&sliceId=1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1634 · Security Note
• http://secunia.com/advisories/35177 · Vendor Advisory
• https://bugzilla.novell.com/show_bug.cgi?id=472979 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1393 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1634 · Note
• http://securityfocus.com/bid/35066 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50688 · Note