CVE-2014-0600 in Novell GroupWise
Summary
FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
12/28/2013
Disclosure
08/29/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67422 | Novell GroupWise FileUploadServlet File information disclosure | 200 | Unproven | Official fix | CVE-2014-0600 |