Lucene search
HistoryAug 16, 2005 - 4:00 a.m.
CVE-2004-2336
cve-2004-2336
novell groupwise
groupwise webaccess
apache web server
remote attackers
directory traversal
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.3%
Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server.
Affected configurations
Node
novellgroupwiseMatch6.0
ORnovellgroupwiseMatch6.0sp1
ORnovellgroupwiseMatch6.0sp2
ORnovellgroupwiseMatch6.0sp3
ORnovellgroupwiseMatch6.0sp4
ORnovellgroupwiseMatch6.5
ORnovellgroupwiseMatch6.5sp1
ORnovellgroupwiseMatch6.5sp2
Node
novellnetwareMatch6.0
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.3%
Related for CVE-2004-2336