CVE-2002-1417

Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence (modified dot-dot), which is mapped to the directory separator.

• http://archives.neohapsis.com/archives/bugtraq/2002-08/0199.htmlPatch, Vendor Advisory
• http://support.novell.com/servlet/tidfinder/2963297
• http://www.iss.net/security_center/static/9910.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/5523Patch, Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0199.htmlPatch, Vendor Advisory
• http://support.novell.com/servlet/tidfinder/2963297
• http://www.iss.net/security_center/static/9910.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/5523Patch, Vendor Advisory

Published

Apr 11, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1411Directory traversal vulnerability in update.dpgs in Duma Pho…
• CVE-2002-1412Gallery photo album package before 1.3.1 allows local and po…
• CVE-2002-1413RCONAG6 for Novell Netware SP2, while running RconJ in secur…
• CVE-2002-1414Buffer overflow in qmailadmin allows local users to gain pri…
• CVE-2002-1415Format string vulnerability in SMTP service for WebEasyMail …
• CVE-2002-1416The POP3 service for WebEasyMail 3.4.2.2 and earlier generat…
• CVE-2002-1418Buffer overflow in the interpreter for Novell NetBasic Scrip…
• CVE-2002-1419The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 …
• CVE-2002-1420Integer signedness error in select() on OpenBSD 3.1 and earl…
• CVE-2002-1421SQL injection vulnerabilities in FUDforum before 2.2.0 allow…
• CVE-2002-1422admbrowse.php in FUDforum before 2.2.0 allows remote attacke…
• CVE-2002-1423tmp_view.php in FUDforum before 2.2.0 allows remote attacker…