CVE-2002-1042

Опубликовано: 04 окт. 2002

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-07/0085.html
http://www.iss.net/security_center/static/9517.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5191
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-07/0085.html
http://www.iss.net/security_center/static/9517.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5191
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:*:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp1:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp1:enterprise:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp10:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp10:enterprise:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp2:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp2:enterprise:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp3:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp3:enterprise:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp4:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp4:enterprise:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp5:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp5:enterprise:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp6:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp6:enterprise:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp7:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp7:enterprise:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp8:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp8:enterprise:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp9:*:*:*:*:*:*

cpe:2.3:a:sun:iplanet_web_server:4.1:sp9:enterprise:*:*:*:*:*

cpe:2.3:a:sun:one_application_server:6.0:*:*:*:*:*:*:*

cpe:2.3:a:sun:one_application_server:6.0:sp1:*:*:*:*:*:*

cpe:2.3:a:sun:one_application_server:6.0:sp2:*:*:*:*:*:*

cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10554

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-jmq5-vh92-gvhq

github

почти 4 года назад