Published: 04/10/2002 Updated: 05/09/2008

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote malicious users to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sun iplanet web server 4.1
netscape enterprise server 3.6
sun one application server 6.0
sun one web server 6.0

source: wwwsecurityfocuscom/bid/5191/info The iPlanet Web Server search engine is prone to a file disclosure vulnerability It is possible for remote attackers to make requests to the search engine which will cause arbitrary readable files on the host running the vulnerable software to be disclosed to the attacker This issue was reporte ...

NVD-CWE-Other http://www.securityfocus.com/bid/5191 http://www.iss.net/security_center/static/9517.php http://archives.neohapsis.com/archives/bugtraq/2002-07/0085.html https://nvd.nist.gov https://www.exploit-db.com/exploits/21603/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1042

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect