Other nomination

CSRF on Novell GroupWise WebAccess

Adrian Pastor

Novell GroupWise WebAccess 6.5x through 8.0 tokenises nothing, so any authenticated request can be forged from a page, a link, or the HTML body of a mail the victim merely opens. The advisory's point is persistence: forging the add-forwarding-rule request installs a silent backdoor that copies every future message to the attacker. CVE-2009-0272; PoC withheld at Novell's request.

Record

Researcher

Adrian Pastor

In the archive

• Nominated for the 2008 Top 10 Web Hacking Techniques

Tags

• csrf
• email
• cve
• vendor-advisory
• abuse-of-functionality
• case-study
• owasp-a01-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Adrian Pastor, first published at the original source. Preserved copies are kept so the citation survives its host.