CVE-2002-1417

Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and…

Medium5.0EPSS 16.6%

Published: 1 Sept 2004
Updated: 8 Aug 2024
Reserved: 5 Feb 2003
Assigned by: mitre

Description

Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence (modified dot-dot), which is mapped to the directory separator.

Timeline

2003
5 Feb 2003
5 Feb 2003
ID reserved
By mitre
2004
1 Sept 200419 months later
1 Sept 2004· 19 months later
Published
2024
8 Aug 202420 years later
8 Aug 2024· 20 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2002-1417, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	Medium5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS (exploitation in 30 days): 16.6% · top 3.0% of all CVEs (8 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.

Weakness

Affected products

n/a
- affected n/a

References (4)

20020820 NOVL-2002-2963297 - NetBasic Buffer Overflow + Scripting Vulnerability (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
http://support.novell.com/servlet/tidfinder/2963297 (opens in a new tab)x_refsource_CONFIRMx_transferred
novell-netbasic-directory-traversal(9910) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
5523 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2002-1417](https://cveledger.app/badge/CVE-2002-1417.svg)](https://cveledger.app/cve/CVE-2002-1417)

Record last updated 8 Aug 2024, 03:26 UTC.