CVE-1999-1005

Medium

Published: 19/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.92%

94th percentile - higher than 94% of all known CVEs

Summary

The Groupwise web server (GWWEB.EXE) allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.

Risk Assessment

Attackers may gain access to sensitive information stored in .htm files, potentially leading to data exposure and privacy breaches for the organization.

Recommendation

It is recommended to update the server to the latest version and implement appropriate security measures to block .. (dot dot) attacks.

Original NVD description (English source)

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.