## Description

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### netscape - enterprise_server

Affected Versions:

- 3.0.7a

### novell - groupwise

Affected Versions:

- 5.2

### novell - groupwise

Affected Versions:

- 5.5

## References

- http://marc.info/?l=bugtraq&m=94571433731824&w=2
- http://www.osvdb.org/3413
- http://www.securityfocus.com/bid/879
- http://marc.info/?l=bugtraq&m=94571433731824&w=2
- http://www.osvdb.org/3413
- http://www.securityfocus.com/bid/879

Neural Processor Active