Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Windows >> Groove Virtual Office / Workspace Multiple Vulnerabilities

Vulnerability Assessment Details

Groove Virtual Office / Workspace Multiple Vulnerabilities

Vulnerability Assessment Summary
Checks for multiple vulnerabilities in Groove Virtual Office / Workspace

Detailed Explanation for this Vulnerability Assessment

Summary :

The remote Windows application is affected by multiple issues.

Description :

According the remote registry, the version of Groove Virtual Office or
Groove Workspace on the remote host suffers from multiple
vulnerabilities. Some of these flaws may permit for arbitrary script
execution, disclosure of sensitive information, and denial of service,
all from remote users.

See also :

http://www.kb.cert.org/vuls/id/155610
http://www.kb.cert.org/vuls/id/232232
http://www.kb.cert.org/vuls/id/372618
http://www.kb.cert.org/vuls/id/443370
http://www.kb.cert.org/vuls/id/514386

Solution :

Upgrade to Workspace v2.5n build 1871 or Virtual Office v3.1a build
2364 or later.

Network Security Threat Level:

High / CVSS Base Score : 8
(AV:R/AC:H/Au:NR/C:C/A:C/I:C/B:N)

Networks Security ID: 13682, 13684, 13685, 13686, 13688

Vulnerability Assessment Copyright: This script is Copyright (C) 2005-2006 Tenable Network Security

Cables, Connectors