Signature Detail
Short Name |
SSL:DEFAULT-PW |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
SSL |
Keywords |
Groupwise Default Password |
Release Date |
2005/01/26 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SSL: Groupwise Default Password
This signature detects HTTP connections to a Novell Groupwise servlet server using the default password. This password is published in Novell documentation and can be used to control the servlet services remotely.
Extended Description
Novell Groupwise Servlet Gateway is a product that allows Java servlets to be run with NetWare, using Novell JVM for NetWare v1.1.7b and NetWare Enterprise Web Server. A remote attacker may gain access to the Servlet Manager interface by entering the default username/password. The default username is "servlet" and the default password is "manager".
Affected Products
- Novell Groupwise 6.0.0
- Novell Groupwise Enhancement Pack 5.5.0
References
- BugTraq: 3697
- CVE: CVE-2001-1195
- URL: http://www.securityfocus.com/archive/1/245871