CVE-1999-1005 - Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .

Back Back to CVE browser

MEDIUM

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .

Published Apr 25, 2000

5.0

MEDIUM

CVSS 2.0

EPSS 7.92%

Description

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://marc.info/?l=bugtraq&m=94571433731824&w=2
mailing-listx_refsource_BUGTRAQ
http://www.osvdb.org/3413
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/879
vdb-entryx_refsource_BID

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=94571433731824&w=2		mailing-listx_refsource_BUGTRAQ
http://www.osvdb.org/3413		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/879		vdb-entryx_refsource_BID

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 25, 2000

Updated Aug 1, 2024

Reserved Dec 21, 1999

Link CVE-1999-1005

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1005

Red Hat

Severity n/a

Public date n/a

Links CVE-1999-1005