CVE-2002-1042: Medium severity Netscape Enterprise server vulnerability
Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1042?
CVE-2002-1042 is considered a medium severity vulnerability due to its potential to allow unauthorized file access.
How do I fix CVE-2002-1042?
To fix CVE-2002-1042, apply the latest service pack or patch provided by the vendor for the affected software.
What software is affected by CVE-2002-1042?
CVE-2002-1042 affects iPlanet Web Server and Sun ONE Web Server on specific versions running on Windows platforms.
What type of attack does CVE-2002-1042 facilitate?
CVE-2002-1042 facilitates directory traversal attacks, allowing remote attackers to read arbitrary server files.
When was CVE-2002-1042 disclosed?
CVE-2002-1042 was disclosed in July 2002, highlighting vulnerabilities in early web server software.