vulnwire
5.0med

CVE-2002-10421 exploit

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when run…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.9%
percentile 90%
Public exploits
1
Exploit-DB

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.

Exploit prediction (EPSS)

3.85% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.

Exploits and detections

  • EDB-21603 iPlanet Web Server 4.1 - Search Component File Disclosure · remote · 2002-07-09

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

References

  • archives.neohapsis.com /archives/bugtraq/2002-07/0085.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • iss.net /security_center/static/9517.php · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/5191 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.