[13064] in bugtraq
Re: Groupewise Web Interface
daemon@ATHENA.MIT.EDU (Sacha Faust Bourque)
Wed Dec 22 16:23:16 1999
Message-Id: <A39CA57849A9D1118A9C0060081695B005C6B9E3@MULTI005>
Date: Tue, 21 Dec 1999 16:57:39 -0500
Reply-To: Sacha Faust Bourque <sfaust@HARTCO.COM>
From: Sacha Faust Bourque <sfaust@HARTCO.COM>
X-To: "satherrl@mailpoint.dssrg.curtin.edu.au"
<satherrl@mailpoint.dssrg.curtin.edu.au>,
BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
did you actually saw it crash or it just froze.
We did some testing like that and we found that GRoupeWise froze
but eventually came back .
-----Original Message-----
From: satherrl@MAILPOINT.DSSRG.CURTIN.EDU.AU
[mailto:satherrl@MAILPOINT.DSSRG.CURTIN.EDU.AU]
Sent: Tuesday, December 21, 1999 5:12 AM
To: BUGTRAQ@SECURITYFOCUS.COM
Subject: Re: Groupewise Web Interface
Quoting Sacha Faust Bourque <sfaust@HARTCO.COM>:
> Problems found with GroupeWise web server ( Novell was contacted 3 weeks
> ago
> and no reply )
> -----------------------------------------------------------------
>
> 1. The help argument in GWWEB.EXE reveal full web path on the server
> 2. anyone can read a .htm file on the system with the GWWEB.EXE and the
> HELP
> argument.
>
> Example:
>
> 1. ( full web server path )
Oops, I just brought down a GroupWise server with
GWWEB.EXE?<very long string here>
whilst testing this.
