Novell NetWare Encoded Slash Directory Traversal Vulnerability

Bugtraq ID:	5522
Class:	Input Validation Error
CVE:	CVE-2002-1437
Remote:	Yes
Local:	No
Published:	Aug 20 2002 12:00AM
Updated:	Jul 11 2009 03:56PM
Credit:	Credited to Rain Forrest Puppy <[email protected]>.
Vulnerable:	Novell Netware 6.0 SP1 Novell Netware 6.0 Novell Netware 5.1 SP4 Novell Netware 5.1
Not Vulnerable:

Novell NetWare Encoded Slash Directory Traversal Vulnerability

Solution:
An update is available:


Novell Netware 5.1 SP4

• Novell perl5002.exe
  Free registration is required.
  http://support.novell.com/servlet/filedownload/ftf/perl5002.exe/

Novell Netware 5.1

• Novell perl5002.exe
  Free registration is required.
  http://support.novell.com/servlet/filedownload/ftf/perl5002.exe/

Novell Netware 6.0

• Novell perl5002.exe
  Free registration is required.
  http://support.novell.com/servlet/filedownload/ftf/perl5002.exe/

Novell Netware 6.0 SP1

• Novell perl5002.exe
  Free registration is required.
  http://support.novell.com/servlet/filedownload/ftf/perl5002.exe/

Novell NetWare Encoded Slash Directory Traversal Vulnerability

References:

• Security Alerts (Novell)