Novell GroupWise WebAccess Multiple Security Vulnerabilities

Bugtraq ID:	35066
Class:	Unknown
CVE:	CVE-2009-1635 CVE-2009-1634
Remote:	Yes
Local:	No
Published:	May 21 2009 12:00AM
Updated:	May 28 2009 11:39PM
Credit:	Gregory DuChemin and Jim LaValley
Vulnerable:	Novell Groupwise 7.0 Novell Groupwise 8.0 HP1 Novell Groupwise 8.0 Novell Groupwise 7.03HP1a Novell Groupwise 7.03 HP2 Novell Groupwise 7.03 Novell Groupwise 7.02x Novell Groupwise 7.01 Novell Groupwise 7.0.0 SP3 Novell Groupwise 7.0.0 SP2 Novell Groupwise 7.0.0 SP1
Not Vulnerable:	Novell Groupwise 8.0 HP2 Novell Groupwise 7.03 HP3

Novell GroupWise WebAccess Multiple Security Vulnerabilities

Novell GroupWise WebAccess is prone to multiple security vulnerabilities.

An attacker may leverage these issues to bypass certain security restrictions or conduct cross-site scripting attacks.

Note that some of the issues may be related to BID 35061. We will update this BID as more information emerges.

Versions prior to WebAccess 7.03 HP3 and 8.0.0 HP2 are vulnerable.

Novell GroupWise WebAccess Multiple Security Vulnerabilities

Attackers can exploit the issues via a browser. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting user to view a malicious webpage.

The following proof of concept is available:

• /data/vulnerabilities/exploits/35066.txt

Novell GroupWise WebAccess Multiple Security Vulnerabilities

Solution:
The vendor has released updates. Please contact the vendor for details.

Novell GroupWise WebAccess Multiple Security Vulnerabilities

References:

• Novell GroupWise Homepage (Novell)
  
• Novell Groupwise fails to properly sanitize emails. ([email protected])
  
• Novell GroupWise WebAccess - Cross Site Scripting (XSS) Security Vulnerability v (Novell)
  
• Novell GroupWise WebAccess - Scripting Security Vulnerability (Novell)
  
• Novell GroupWise WebAccess - Security Vulnerability in Session Management Mechan (Novell)