CVE-2001-1195

Description

Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges.

Affected products

• Novell / groupwise5.5 – 5.5
• Novell / groupwise6.0 – 6.0

Exploits & proofs of concept

• exploit-dbNovell Groupwise 5.5/6.0 Servlet Gateway - Default Authenticationby Adam Gray

References

• MISChttp://www.securityfocus.com/archive/1/245871
• MISChttp://www.iss.net/security_center/static/7701.php
• MISChttp://support.novell.com/cgi-bin/search/searchtid.cgi?/10067329.htm
• MISChttp://www.securityfocus.com/bid/3697