CVE-2011-2221

Description

The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain sensitive GroupWise information via unspecified vectors.

Affected products

• Novell / data_synchronizer1.0.0 – 1.0.0
• Novell / data_synchronizer1.1.0 – 1.1.0
• Novell / data_synchronizer1.1.1 – 1.1.1
• Novell / data_synchronizer1.1.2 – 1.1.2
• Novell / mobility_pack1.0 – 1.0
• Novell / mobility_pack1.1 – 1.1
• Novell / mobility_pack1.1.1 – 1.1.1
• Novell / mobility_pack1.1.2 – 1.1.2

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/45527
• MISChttp://www.securityfocus.com/bid/49069
• MISChttp://www.novell.com/support/viewContent.do?externalId=7009053