|
|
|
|
| |
Credit:
The information has been provided by Novell Security.
The original article can be found at: https://secure-support.novell.com/KanisaPlatform/Publishing/732/3263374_f.SAL_Public.html
|
| |
Vulnerable Systems:
* Novell GroupWise version 7
* Novell GroupWise version 6.5
Immune Systems:
* Novell GroupWise version 7 SP3
* Novell GroupWise version 6.5 SP6 client Update 3
Workaround:
Users that have shared folders with other users can protect their email by removing shared access until remedial steps have been completed. It is not necessary to delete the contents of the shared folders and they can be re-shared after the administrator has locked out older client versions.
To remove shared access to a folder select the shared folder, click File > Sharing, then select Not shared
Remedy:
For GroupWise 7 - Customers running GroupWise 7.0 clients should immediately upgrade all clients to GroupWise 7 SP3 (dated 09 Mar 2008) and lock out older clients via ConsoleOne.
GroupWise 6.5 Windows- Customers running GroupWise 6.5 Windows clients should immediately upgrade all Windows clients to the GroupWise 6.5 SP6 client Update 3 (dated 11 Mar 2008), or upgrade to GroupWise 7 SP3. Older clients must be locked out via ConsoleOne.
GroupWise 6.5 Linux - Customers running GroupWise 6.5 Linux or Mac clients should immediately upgrade to GroupWise 7 SP3 (dated 09 Mar 2008).
For GroupWise 6.0 and previous - Customers still running unsupported GroupWise client versions (5.x and 6) should immediately upgrade clients and servers to either GroupWise 6.5 SP6 Update 3 or to GroupWise 7 SP3. Older clients must be locked out via ConsoleOne.
If Blackberry Enterprise Server (BES) is installed in a GroupWise 7 environment then upgrade the BES to a version which supports the GroupWise 7 client (BES 4.0 SP 7 or BES 4.1 SP4), and upgrade the GW client installed on the machine to 7.0 SP3 (dated 09 Mar 2008).
If Blackberry Enterprise Server (BES) is installed in a GroupWise 6.5 environment then upgrade the GW client installed on the machine to 6.5 SP6 Client Update 3 (dated 11 Mar 2008).
CVE Information:
CVE-2008-1330
|
|
|
|
|
