SecurityTracker.com
Keep Track of the Latest Vulnerabilities
with SecurityTracker!
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 
Sign Up
Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
Instant Alerts
Buy our Premium Vulnerability Notification Service to receive customized, instant alerts
Affiliates
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
Partners
Become a Partner and License Our Database or Notification Service
Report a Bug
Report a vulnerability that you have found to SecurityTracker
bugs
@
securitytracker.com






Category:   Application (Generic)  >   GroupWise Vendors:   Novell
Novell GroupWise Server Contains an Unspecified Security Flaw
SecurityTracker Alert ID:  1002199
SecurityTracker URL:  http://securitytracker.com/id/1002199
CVE Reference:   GENERIC-MAP-NOMATCH   (Links to External Site)
Date:  Aug 15 2001
Impact:   Not specified
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): GroupWise 5.5 Enhancement Pack and GroupWise 6
Description:   Novell announced a "security issue" in its GroupWise collaboration software, but did not disclose what the flaw was.

Novell is warning customers that they should download a Server Padlock fix. A Client Padlock fix is also available, but the flaw is reportedly on the server side.

GroupWise 4.x, 5.0, 5.2, and 5.5 servers and clients are reportedly not affected.

Novell has provided no further details.

Impact:   Novell has not released any information regarding the impact of this security vulnerability. However, they are recommending that all affected customers apply the appropriate patch.
Solution:   The vendor has provided patches, which are available at the Vendor URL.
Vendor URL:  support.novell.com/padlock (Links to External Site)
Cause:   Not specified
Underlying OS:   Windows (NT), Windows (2000)

Message History:   None.


 Source Message Contents

Date:  Tue, 14 Aug 2001 21:39:06 -0500
Subject:  Fwd: Security Alert: Groupwise - Action Required


I don't know if there is anyone running Groupwise anymore (I guess I'd be 
surprised) but this is worth a look if you are.

-Mike

>X-Mailer: Novell GroupWise Internet Agent 6.0
>Date: Tue, 14 Aug 2001 17:31:33 -0600
>From: DeveloperNet Subscribers <devnet_connect@novell.com>
>To: mshaw@wwisp.com
>Subject: Security Alert: Groupwise - Action Required
>Reply-To: devnet_connect@novell.com
>X-MIME-Autoconverted: from quoted-printable to 8bit by mail2.wwisp.com id 
>f7F20NF16045
>
>Novell has discovered a security issue with GroupWise. This issue only 
>affects GroupWise 5.5 Enhancement Pack and GroupWise 6 customers. A fix, 
>called the Padlock Fix, has been developed and is available on Novell's 
>support Web site at: http://support.novell.com/padlock
>
>We have sent a message to all GroupWise customers for whom we have contact 
>information. If you have customers who are running GroupWise, please call 
>them, inform them of this issue, and ask them to download the Server 
>Padlock Fix immediately. There is both a server and client fix. Once the 
>Server Padlock Fix is applied, that server and its corresponding 
>workstations are secured. The Client Padlock Fix then needs to be applied 
>to return the overall system to optimum performance.  Again, we recommend 
>that all of your customers apply the Server Padlock Fix immediately.
>
>Your customers may call Novell Technical Support free of charge at 
>1.800.858.4000, for EMEA call 49.211.5632.744, for Asia/Pacific call 
>61.2.9925.3000.
>
>Novell is not releasing details about the security issue at this time so 
>that our customers have time to secure their systems.  GroupWise 4.x, 5.0, 
>5.2, and 5.5 servers and clients are not affected. Customers with these 
>versions need not apply the fix.
>
>
>---
>You are currently subscribed as: [mshaw@wwisp.com]
>To unsubscribe, please visit http://developer.novell.com/email


 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

Copyright 2012, SecurityGlobal.net LLC