CVEブラウザに戻る

CVE-2000-0431

HIGH

7.5

CVSS Severity Score

EPSS Score0.0030%

EPSS Percentile42.22th

Published2000年5月22日

Last Modified2026年4月16日

Vulnerability Description

Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.

Affected Platforms (CPE)

🔌

Sun

Cobalt Raq 2

All versions

🔌

Sun

Cobalt Raq 3i

All versions

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html

🔗 http://www.osvdb.org/1346

🔗 http://www.securityfocus.com/bid/1238

🔗 http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html

🔗 http://www.osvdb.org/1346

🔗 http://www.securityfocus.com/bid/1238

🔗 http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net

関連する脆弱性情報

CVE-2002-136110.0

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute a...

CVE-1999-040810.0

Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are acc...

CVE-2002-03487.5

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long ...

CVE-2002-03467.5

Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via J...