Directory Traversal Vulnerability in Novell NetBasic Scripting Server

CVE-2002-1417

Summary

A directory traversal vulnerability exists in the Novell NetBasic Scripting Server, affecting Netware versions 5.1 and 6, as well as Novell Small Business Suite versions 5.1 and 6. This flaw enables remote attackers to exploit the system by crafting a URL that includes a special sequence (..%5c), allowing them to access arbitrary files on the server. Such unauthorized access can lead to the disclosure of sensitive data, posing significant risks to the integrity and confidentiality of the affected systems.

References