high7.8
CVE-2014-0600
FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMa…
Impact
FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Groupwise | Version 2014 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.novell.com/support/kb/doc.php?id=7015566
- http://www.securitytracker.com/id/1030801
- http://www.zerodayinitiative.com/advisories/ZDI-14-296/
- https://bugzilla.novell.com/show_bug.cgi?id=879192
- http://www.novell.com/support/kb/doc.php?id=7015566
- http://www.securitytracker.com/id/1030801
- http://www.zerodayinitiative.com/advisories/ZDI-14-296/
- https://bugzilla.novell.com/show_bug.cgi?id=879192