Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
| Software | From | Fixed in |
|---|---|---|
| netscape / enterprise_server | 3.0.7a | 3.0.7a.x |
| novell / groupwise | 5.5 | 5.5.x |
| novell / groupwise | 5.2 | 5.2.x |