Nessus Plugin #10873

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

GroupWise Web Interface 'HTMLVER' hole

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2002 SecurITeam

Summary:

GroupWise Web Interface 'HTMLVER' hole

Version:

$Revision: 1.9 $

Cve_id:

CAN-2002-0341

Bugtraq_id:

-

Xrefs:

-

Description:

By modifying the GroupWise Web Interface HTMLVER URL
request, it is possible to gain additional information on
the remote computer and even read local files from its
hard drive

Solution : contact your vendor for a patch
Risk factor : High