Login Request a demo
Unscored severity · published May 22, 2000
CVE-2000-0431
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Cobalt Raq 2 · Sun
All versions, or not specified · source: NVD
CR
Cobalt Raq 3i · Sun
All versions, or not specified · source: NVD
Affected product
CR
Cobalt Raq 2
Sun
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0431
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0431
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html
www.osvdb.org
http://www.osvdb.org/1346
Patch
http://www.securityfocus.com/bid/1238
www.securityfocus.com
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net
More from Cobalt Raq 2
–
CVE-2002-0430
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a…
–
CVE-2002-0348
service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument
–
CVE-2002-0347
Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a
–
CVE-2002-0346
Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2)…
–
CVE-2000-0442
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command