The Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to obtain sensitive information via a certain directive to Apache that causes the HTTP-Header response to be modified, which may reveal the servers internal IP address.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netware | Novell | 6.5 (including) | 6.5 (including) |
References
- http://osvdb.org/45742
- http://www.vupen.com/english/advisories/2007/2388
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35365
- https://secure-support.novell.com/KanisaPlatform/Publishing/370/3555327_f.SAL_Public.html
- http://osvdb.org/45742
- http://www.vupen.com/english/advisories/2007/2388
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35365
- https://secure-support.novell.com/KanisaPlatform/Publishing/370/3555327_f.SAL_Public.html