CVEvulnerability

CVE-2002-0430

3.7 LOW Published 2002-08-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-08-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.7 LOW — AV:L/AC:H/Au:N/C:P/I:P/A:P

Description

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.

Affected configurations

• sun cobalt raq 2 • sun cobalt raq 3i • sun cobalt raq 4

References