Vulnerability CVE-2005-0296


Published: 2005-01-17   Modified: 2012-02-12

Description:
** DISPUTED ** NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the "about" information page. NOTE: the vendor has disputed this issue.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Novell -> Groupwise 
Novell -> Groupwise webaccess 

 References:
http://xforce.iss.net/xforce/xfdb/18954
http://www.securityfocus.com/bid/12285
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-01/0341.html
http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-01/0771.html
http://support.novell.com/servlet/tidfinder/10096251
http://marc.theaimsgroup.com/?l=bugtraq&m=110608203729814&w=2
http://www.osvdb.org/13135

Copyright 2024, cxsecurity.com

 

Back to Top