Vulnerabilities > CVE-1999-1005
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 | |
| Application | 2 |
Exploit-Db
| description | Netscape Enterprise Server for NetWare 4/5 3.0.7 a,Novell Groupwise 5.2/5.5 GWWEB.EXE Multiple Vulnerabilities. CVE-1999-1005. Remote exploit for novell plat... |
| id | EDB-ID:19682 |
| last seen | 2016-02-02 |
| modified | 1999-12-19 |
| published | 1999-12-19 |
| reporter | Sacha Faust Bourque |
| source | https://www.exploit-db.com/download/19682/ |
| title | Netscape Enterprise Server ,Novell Groupwise 5.2/5.5 GWWEB.EXE Multiple Vulnerabilities |