CVE-2002-1042

Published: Oct 4, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.

Affected (26)

Products: Netscape: Enterprise Server · Sun: Iplanet Web Server, One Application Server, One Web Server

1 product

3 products

One Application Server

One Web Server

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Netscape Enterprise Server	Version 3.6
Sun Iplanet Web Server	Version 4.1
Sun Iplanet Web Server	Version 4.1 sp10
Sun Iplanet Web Server	Version 4.1 sp10
Sun Iplanet Web Server	Version 4.1 sp1
Sun Iplanet Web Server	Version 4.1 sp1
Sun Iplanet Web Server	Version 4.1 sp2
Sun Iplanet Web Server	Version 4.1 sp2
Sun Iplanet Web Server	Version 4.1 sp3
Sun Iplanet Web Server	Version 4.1 sp3
Sun Iplanet Web Server	Version 4.1 sp4
Sun Iplanet Web Server	Version 4.1 sp4
Sun Iplanet Web Server	Version 4.1 sp5
Sun Iplanet Web Server	Version 4.1 sp5
Sun Iplanet Web Server	Version 4.1 sp6
Sun Iplanet Web Server	Version 4.1 sp6
Sun Iplanet Web Server	Version 4.1 sp7
Sun Iplanet Web Server	Version 4.1 sp7
Sun Iplanet Web Server	Version 4.1 sp8
Sun Iplanet Web Server	Version 4.1 sp8
Sun Iplanet Web Server	Version 4.1 sp9
Sun Iplanet Web Server	Version 4.1 sp9
Sun One Application Server	Version 6.0
Sun One Application Server	Version 6.0 sp1
Sun One Application Server	Version 6.0 sp2
Sun One Web Server	Version 6.0 sp3