Unscored severity · published Dec 19, 1999
CVE-1999-1005
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a
–
CVSS
7.9%
EPSS
No
On KEV
Description
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.9% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Enterprise Server · Netscape
3.0.7a · source: NVD
GR
Groupwise · Novell
5.2; 5.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1005
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1005
marc.info
http://marc.info/?l=bugtraq&m=94571433731824&w=2
www.osvdb.org
http://www.osvdb.org/3413
www.securityfocus.com
http://www.securityfocus.com/bid/879
More from Enterprise Server
7.0
CVE-1999-0012
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names
6.1
CVE-2018-18940
servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string
–
CVE-2004-0826
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2…
–
CVE-2002-1655
The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request
–
CVE-2002-1654
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher…