Search Results (86 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-1999-1006 1 Novell 1 Groupwise 2025-04-03 N/A
Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.
CVE-2002-1088 1 Novell 1 Groupwise 2025-04-03 N/A
Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command.
CVE-2006-0992 1 Novell 1 Groupwise Messenger 2025-04-03 N/A
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092. This is the correct identifier.
CVE-2000-0146 1 Novell 1 Groupwise 2025-04-03 N/A
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
CVE-2002-0303 1 Novell 1 Groupwise 2025-04-03 N/A
GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password.
CVE-2005-2620 1 Novell 1 Groupwise 2025-04-03 N/A
grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory.