[NEWS] Novell GroupWise Clear Text Vulnerability

From: SecuriTeam (support_at_securiteam.com)
Date: 08/05/03

  • Next message: SecuriTeam: "[NEWS] Everybuddy Vulnerable to a DoS Attack (Long Message)" 
    To: list@securiteam.com
Date: 5 Aug 2003 12:04:18 +0200

    The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
    - - promotion

    Get Thawte's New Step-by-Step SSL Guide for MSIIS

    In this guide you will find out how to test, purchase, install
    and use a Thawte Digital Certificate on your MSIIS web server.
    Throughout, best practices for set-up are highlighted to help you
    ensure efficient ongoing management of your encryption keys and digital
    certificates. Get your copy of this new guide now:
    http://ad.doubleclick.net/clk;5903126;8265119;j

    - - - - - - - - -

      Novell GroupWise Clear Text Vulnerability
    ------------------------------------------------------------------------

    SUMMARY

    Novacoast has discovered a vulnerability in the Novell GroupWise 6.5
    Wireless Webaccess logging functionality. The software exposes all
    username and passwords within the log file in clear text. This
    information could be used to impersonate other users and allow
    unauthorized access to mail or network resources.

    DETAILS

    Vulnerable systems:
     * Novell GroupWise version 6.5 Webaccess
     * Novell GroupWise Wireless Web Access
     * Novell Linux/Mac Beta Client
     * NetWare version 5/6

    Immune systems:
     * Novell GroupWise version 6.5 SP1

    A key component of the Novell Nterprise* family of one Net solutions,
    Novell® GroupWise® 6.5 is a cross-platform collaboration product that
    enables you to work smarter alone and with others over any type of
    network*wired to wireless, including the Internet. In addition to
    integrated e-mail and scheduling services, GroupWise offers task-,
    contact- and document-management services that increase productivity.
    GroupWise also delivers secure instant messaging, tools that help you
    manage daily activities more efficiently and extensive mobile-access
    capabilities. Briefly, this innovative, open standards-based approach to
    collaboration services provides security, control and mobility while
    increasing user productivity and reducing the cost of managing and
    maintaining your organization's essential communication and collaboration
    services.

    Exploit:
    None required
    Open sys:\apache\logs\access_log
    Passwords are listed as part of the URL, the are preceded with
    username=****&password=****

    Recommended Solution:
    Upgrade to Novell GroupWise 6.5 SP1.

    Status:
    This bug has been submitted to, acknowledged by, and a fix has been
    created and included with the latest service pack for Novell GroupWise
    6.5. It can be downloaded from: <http://support.novell.com>
    http://support.novell.com

    Additional information can be found at the following location:
    http://support.novell.com/cgi-bin/search/searchtid.cgi?/10085583.htm

    ADDITIONAL INFORMATION

    The information has been provided by <mailto:agray@novacoast.com> Adam
    Gray.

    ========================================

    This bulletin is sent to members of the SecuriTeam mailing list.
    To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
    In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

    ====================
    ====================

    DISCLAIMER:
    The information in this bulletin is provided "AS IS" without warranty of any kind.
    In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

  • Next message: SecuriTeam: "[NEWS] Everybuddy Vulnerable to a DoS Attack (Long Message)"