CVEvulnerability
CVE-2000-0431
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2000-05-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
Affected configurations
• sun cobalt raq 2
• sun cobalt raq 3i
References
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html archives.neohapsis.com
- http://www.osvdb.org/1346 www.osvdb.org
- http://www.securityfocus.com/bid/1238 Patch, Vendor Advisory
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net www.securityfocus.com
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html archives.neohapsis.com
- http://www.osvdb.org/1346 www.osvdb.org
- http://www.securityfocus.com/bid/1238 Patch, Vendor Advisory
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net www.securityfocus.com