medium5.0Public exploit code
CVE-1999-1005
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netscape Enterprise Server / Novell Groupwise 5.2/5.5 - 'GWWEB.EXE' Multiple Vulnerabilities1999-12-19 · remote · novell · Verified
Impact
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netscape | Enterprise Server | Version 3.0.7a |
| Novell | Groupwise | Versions 5.2, 5.5 |