CVE-1999-1005

Summary

CVE-1999-1005 is an old vulnerability affecting the Groupwise web server and its GWWEB.EXE component. Hackers can exploit this issue by manipulating the HELP parameter in a .. (dot dot) attack, enabling them to read arbitrary .htm files on the server remotely. This vulnerability poses a significant risk to the confidentiality of data stored on the affected system. Attackers could potentially gain access to sensitive information by exploiting this weakness. Organizations using this software are urged to apply relevant patches or upgrades to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.