CVE-2002-1042

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

3.85% chance of exploitation in the next 30 days, 90th percentile

Published

2002-08-31

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21603

Security advisories

• http://www.iss.net/security_center/static/9517.php
• http://www.securityfocus.com/bid/5191

References

• CVE Record
• NVD entry