CVE-2002-1417

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 16.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-04-11 · updated 2026-06-16

Description

Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence (modified dot-dot), which is mapped to the directory separator.

Affected products

Novell Netware: 5.1, 6.0
Novell Small Business Suite: 5.1, 6.0

References

http://archives.neohapsis.com/archives/bugtraq/2002-08/0199.html
http://support.novell.com/servlet/tidfinder/2963297
http://www.iss.net/security_center/static/9910.php
http://www.securityfocus.com/bid/5523
http://archives.neohapsis.com/archives/bugtraq/2002-08/0199.html
http://support.novell.com/servlet/tidfinder/2963297
http://www.iss.net/security_center/static/9910.php
http://www.securityfocus.com/bid/5523

Get alerted when CVE-2002-1417 or the next vulnerability affects your stack