CVE-2002-1417

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence (modified dot-dot), which is mapped to the directory separator.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-08/0199.htmlPatch, Vendor Advisory
http://support.novell.com/servlet/tidfinder/2963297
http://www.iss.net/security_center/static/9910.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5523Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-08/0199.htmlPatch, Vendor Advisory
http://support.novell.com/servlet/tidfinder/2963297
http://www.iss.net/security_center/static/9910.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/5523Patch, Vendor Advisory

Timeline

Published: Apr 11, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-14185.0Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and CVE-2002-14197.5The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify intended access restri CVE-2002-14207.2Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value CVE-2002-14217.5SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php CVE-2002-14225.0admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest param CVE-2002-14235.0tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.CVE-2002-14245.0Buffer overflow in munpack in mpack 1.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code CVE-2002-14256.4Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory vi CVE-2002-14267.8HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 charac CVE-2002-14277.5The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to CVE-2002-142810.0index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cookie parameter set to 1 CVE-2002-14295.0Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox pa