Unrated severityNVD Advisory· Published Apr 11, 2003· Updated Jun 16, 2026

CVE-2002-1437

Description

Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" (URL-encoded dot-dot backslash) sequences.

Affected products

Novell/Netware5 versions
cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:novell:netware:5.1:sp4:*:*:*:*:*:*
- cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:novell:netware:6.0:sp1:*:*:*:*:*:*
- (no CPE)range: <=5.1 AND <=6

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/bugtraq/2002-08/0202.htmlnvdPatchVendor Advisory
www.iss.net/security_center/static/9915.phpnvdPatchVendor Advisory
www.securityfocus.com/bid/5522nvdPatchVendor Advisory
support.novell.com/servlet/tidfinder/2963307nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.014
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000