Bugtraq mailing list archives

Re: Groupewise Web Interface


From: satherrl () MAILPOINT DSSRG CURTIN EDU AU (satherrl () MAILPOINT DSSRG CURTIN EDU AU)
Date: Tue, 21 Dec 1999 18:12:27 +0800


Quoting Sacha Faust Bourque <sfaust () HARTCO COM>:

Problems found with GroupeWise web server ( Novell was contacted 3 weeks
ago
and no reply )
-----------------------------------------------------------------

1. The help argument in GWWEB.EXE reveal full web path on the server
2. anyone can read a .htm file on the system with the GWWEB.EXE and the
HELP
argument.

Example:

1. ( full web server path )
Oops, I just brought down a GroupWise server with
GWWEB.EXE?<very long string here>
whilst testing this.


Current thread: