5.0med
CVE-2004-2336
Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare wher…
Published 21 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.2%
percentile 82%
Public exploits
0
none known
Summary
Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server.
Exploit prediction (EPSS)
2.16% probability of exploitation in the next 30 days, higher than 82% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
- support.novell.com /cgi-bin/search/searchtid.cgi?/10091330.htm · x_refsource_CONFIRM, x_transferred
- securitytracker.com /alerts/2004/Mar/1009417.html · vdb-entry, x_refsource_SECTRACK, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/15467 · vdb-entry, x_refsource_XF, x_transferred
- secunia.com /advisories/11119 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securityfocus.com /bid/9864 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2004-2336
- NVD: CVE-2004-2336
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.