Bugtraq mailing list archives

Re: Groupewise Web Interface


From: sfaust () HARTCO COM (Sacha Faust Bourque)
Date: Tue, 21 Dec 1999 16:57:39 -0500


did you actually saw it crash or it just froze.
We did some testing like that and we found that GRoupeWise froze
but eventually came back .

-----Original Message-----
From: satherrl () MAILPOINT DSSRG CURTIN EDU AU
[mailto:satherrl () MAILPOINT DSSRG CURTIN EDU AU]
Sent: Tuesday, December 21, 1999 5:12 AM
To: BUGTRAQ () SECURITYFOCUS COM
Subject: Re: Groupewise Web Interface

Quoting Sacha Faust Bourque <sfaust () HARTCO COM>:

Problems found with GroupeWise web server ( Novell was contacted 3 weeks
ago
and no reply )
-----------------------------------------------------------------

1. The help argument in GWWEB.EXE reveal full web path on the server
2. anyone can read a .htm file on the system with the GWWEB.EXE and the
HELP
argument.

Example:

1. ( full web server path )
Oops, I just brought down a GroupWise server with
GWWEB.EXE?<very long string here>
whilst testing this.


Current thread: