Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_server | Netscape | 3.0.7a (including) | 3.0.7a (including) |
| Groupwise | Novell | 5.2 (including) | 5.2 (including) |
| Groupwise | Novell | 5.5 (including) | 5.5 (including) |