[SA40623] Novell GroupWise WebAccess Information Disclosure Vulnerability

Thursday, July 15 2010 @ 04:21 PM CDT

Contributed by: kkbass

SECUNIA ADVISORY ID:
SA40623

VERIFY ADVISORY:
Secunia.com
http://secunia.com/advisories/40623/
Customer Area (Credentials Required)
https://ca.secunia.com/?page=viewadvisory&vuln_id=40623

RELEASE DATE:
2010-07-15

DISCUSS ADVISORY:
http://secunia.com/advisories/40623/#comments

DESCRIPTION:
A vulnerability has been reported in Novell GroupWise, which can be
exploited by malicious users to disclose potentially sensitive
information.

For more information see vulnerability #1:
SA40579

The vulnerability is reported in versions 7.0, 7.01, 7.02, 7.03x, and
7.04.

SOLUTION:
Upgrade to GroupWise 8 and apply Support Pack 2 or later.

ORIGINAL ADVISORY:
http://www.novell.com/support/viewContent.do?externalId=7006373

OTHER REFERENCES:
Further details available in Customer Area:
http://secunia.com/products/corporate/EVM/

DEEP LINKS:
Further details available in Customer Area:
http://secunia.com/products/corporate/EVM/

EXTENDED DESCRIPTION:
Further details available in Customer Area:
http://secunia.com/products/corporate/EVM/

EXTENDED SOLUTION:
Further details available in Customer Area:
http://secunia.com/products/corporate/EVM/

EXPLOIT:
Further details available in Customer Area:
http://secunia.com/products/corporate/EVM/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

0 comments



http://www.abend.org/article.php/20100715162108191