CVE-2002-1437

Опубликовано: 11 апр. 2003

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" (URL-encoded dot-dot backslash) sequences.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html
Patch
Vendor Advisory
http://support.novell.com/servlet/tidfinder/2963307
http://www.iss.net/security_center/static/9915.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5522
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html
Patch
Vendor Advisory
http://support.novell.com/servlet/tidfinder/2963307
http://www.iss.net/security_center/static/9915.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5522
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*

cpe:2.3:o:novell:netware:5.1:sp4:*:*:*:*:*:*

cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*

cpe:2.3:o:novell:netware:6.0:sp1:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04604

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-pgf4-g67j-c3jw

github

почти 4 года назад