CVE-1999-1005
CVSS 2.0 Score 5 of 10 (medium)
Details
Published Dec 19, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-1005 is a vulnerability affecting the Groupwise web server and its GWWEB.EXE component. An attacker can exploit this issue by manipulating the HELP parameter in a .. (dot dot) attack, granting unauthorized access to read arbitrary .htm files on the server. This vulnerability poses a significant risk as it can lead to sensitive information disclosure. It is essential for organizations using the affected Groupwise web server to apply the available patch or implement mitigations to protect against this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Novell GroupWise
Affected Vendors
- Novell Inc