Search/CVE-2002-1042
● CVE

CVE-2002-1042

Vendornetscape, sunProductenterprise server, iplanet web server, one application server, one web serverDiscoveredOct 4, 2002UpdatedApr 16, 2026

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.

View graph Watch Export
CVSS v3.1
—
EPSS
3.85%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
4 relationships
Timeline
disclosure → media coverage
Oct 4, 2002
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026