CVEvulnerability

CVE-2002-1042

5.0 MEDIUM Published 2002-10-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-10-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.

Affected configurations

• netscape enterprise server 3.6 • sun iplanet web server 4.1 • sun one application server 6.0 • sun one web server 6.0

Related

Referenced by CWE · observed example (2)

  • CWE-23 Relative Path Traversal weakness
  • CWE-28 Path Traversal: '..\filedir' weakness

References