Vulnerability in Netscape Enterprise Server
CVE-2002-1042
Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.
EPSS: 0.039 (89.1th percentile) — read the EPSS interpretation.
Affected products
- Netscape Enterprise_server — versions 3.6
- Sun Iplanet_web_server — versions 4.1
- Sun One_application_server — versions 6.0
- Sun One_web_server — versions 6.0
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)