A security issue has been reported in GroupWise 6 and 6.5 WebAccess, which potentially can be exploited by malicious people to gain unauthorised access to a vulnerable server.

The problem is that the WebAccess default configuration is insecure on systems running NetWare and using the Apache 1.3x web server.

Exploitation furthermore requires that Apache has been loaded using the "GWAPACHE.CONF" file.

Solution
Install the most recent field-test file for 6.5 SP2 WebAccess ("FWA652E.EXE" or later) or apply vendor workaround.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Original Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10091330.htm

Deep Links
Links available in Customer Area