Unrated severityNVD Advisory· Published Oct 15, 2001· Updated Jun 16, 2026

CVE-2001-1458

Description

Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" (dot dot) sequences and a null character.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Novell/Groupwise4 versions
cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*
- cpe:2.3:a:novell:groupwise:5.5:*:enhancement_pack:*:*:*:*:*
- cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*
- (no CPE)range: 5.5, 6.0

Patches

Vulnerability mechanics

References

www.foundstone.com/index.htmnvdExploit
www.kb.cert.org/vuls/id/341539nvdUS Government Resource
online.securityfocus.com/archive/1/220667nvd
support.novell.com/servlet/tidfinder/2960443nvd
www.novell.com/coolsolutions/gwmag/features/a_webaccess_security_gw.htmlnvd
www.securityfocus.com/bid/3436nvd
exchange.xforce.ibmcloud.com/vulnerabilities/7287nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000