CVE-2005-0296

Published Jan 17, 2005

Last updated 3 months ago

Overview

Description: NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the "about" information page. NOTE: the vendor has disputed this issue
Source: cve@mitre.org
NVD status: Modified
CNA Tags: disputed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "194704B6-4820-4398-8906-A1E529ED65AF"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise:6.0:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5E0DC694-0DEB-41DE-8A0D-9B649FC2F220"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise:6.0:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "174646C1-60F8-4A84-9C0D-785303EBAF6D"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise:6.0:sp3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F5DFFF8-7DCF-48E0-B43E-269EA4F3AE75"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise:6.0:sp4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A2F5DF0E-8158-4D2E-88CC-BBD7A031054E"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "08A78BE7-6426-41CD-BBAF-9BB951726D33"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E50599E1-45E5-443F-AAEC-F91778CA4792"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise_webaccess:6.0:sp4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "24B28BB6-4A33-4A61-9810-9AB26911B490"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise_webaccess:6.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "57EFCA37-C863-4E22-B231-B0A10E65594E"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5298016B-B6E3-4236-B99F-57353A495B3F"
          },
          {
            "criteria": "cpe:2.3:a:novell:groupwise_webaccess:6.5:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "27060485-FD94-4E73-87B6-2AE940F02283"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References