CVE-1999-1005

No fix known EPSS 8%

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.

Published 2000-04-25 · CVE record · OSV

Products: netscape enterprise_server, novell groupwise