CVE-1999-0408

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0840%

EPSS Percentile18.23th

PublishedFeb 25, 1999

Last ModifiedApr 16, 2026

Vulnerability Description

Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.

Affected Platforms (CPE)

📦

Sun

Cobalt Raq

All versions

References & Advisories

🔗 http://www.securityfocus.com/bid/337

Related Vulnerabilities

CVE-2002-136110.0

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute a...

CVE-2002-03467.5

Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via J...

CVE-2002-03487.5

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long ...

CVE-2002-03475.0

Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files out...