CVE-2002-1042

No fix known EPSS 4%

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.

Published 2002-08-31 · CVE record · OSV

Products: netscape enterprise_server, sun iplanet_web_server, sun one_application_server, sun one_web_server