Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-0146 — Groupwise vulnerability

4 documents4 sources

Severity

5.0MEDIUMNVD

EPSS

5.8%

top 9.50%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Novell Groupwise

Timeline

PublishedFeb 7

Latest updateApr 30

Description

The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDnovell/groupwise5.5

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

GHSA

GHSA-5p6w-4v4r-prx9: The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet↗2022-04-30

▶

CVEList

CVE-2000-0146: The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet↗2000-10-13

▶

💥Exploits & PoCs

Exploit-DB

Novell Groupwise Enhancement Pack 5.5 Enhancement Pack - Denial of Service↗2000-02-07

▶