CVE-2002-1417 — Path Traversal in Netware

4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
13.6%
top 5.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Novell NetwareNovell Small Business Suite
Timeline
PublishedApr 11
Latest updateApr 30

Description

Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence (modified dot-dot), which is mapped to the directory separator.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDnovell/netware5.1, 6.0+1

Patches

Patch: archives.neohapsis.com ↗Patch: www.iss.net ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wrjp-jc2q-pxvq: Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5↗2022-04-30
▶
CVEList
CVE-2002-1417: Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5↗2004-09-01
▶

💥Exploits & PoCs

1
Exploit-DB
Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service↗2002-01-18
▶
CVE-2002-1417 — Path Traversal in Novell Netware | cvebase