Unscored severity · published Jan 17, 2005
CVE-2005-0296
NOTE: this issue has been disputed by the vendor
–
CVSS
2.6%
EPSS
No
On KEV
Description
NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the "about" information page. NOTE: the vendor has disputed this issue
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GR
Groupwise · Novell
6.0; 6.0; 6.0; 6.0; 6.0; 6.5; +2 more · source: NVD
GW
Groupwise Webaccess · Novell
6.0; 6.5; 6.5; 6.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0296
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0296
marc.info
http://marc.info/?l=bugtraq&m=110608203729814&w=2
Vendor Advisory
http://support.novell.com/servlet/tidfinder/10096251
Vendor Advisory
http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-01/0771.html
Vendor Advisory
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-01/0341.html
www.osvdb.org
http://www.osvdb.org/13135
Vendor Advisory
http://www.securityfocus.com/bid/12285
More from Groupwise
9.8
CVE-2016-5762
Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long (1)…
6.1
CVE-2016-5761
Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted…
6.1
CVE-2016-5760
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allow remote attackers to inject…
6.1
CVE-2016-9169
A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote…
–
CVE-2014-0611
Multiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 2012 before Support Pack 4 and 2014 before Support Pack 2 allow remote attackers to inject…