GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2002-0338 | GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| http://marc.info/?l=bugtraq&m=101494830315071&w=2 |
|
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T02:49:27.386Z
Reserved: 2002-05-01T00:00:00
Link: CVE-2002-0341
No data.
Status : Deferred
Published: 2002-06-25T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2002-0341
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD