Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: Groupewise Web Interface
From: satherrl () MAILPOINT DSSRG CURTIN EDU AU (satherrl () MAILPOINT DSSRG CURTIN EDU AU)
Date: Tue, 21 Dec 1999 18:12:27 +0800


Quoting Sacha Faust Bourque <sfaust () HARTCO COM>:

Problems found with GroupeWise web server ( Novell was contacted 3 weeks
ago
and no reply )
-----------------------------------------------------------------

1. The help argument in GWWEB.EXE reveal full web path on the server
2. anyone can read a .htm file on the system with the GWWEB.EXE and the
HELP
argument.

Example:

1. ( full web server path )
Oops, I just brought down a GroupWise server with
GWWEB.EXE?<very long string here>
whilst testing this.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault