CVEブラウザに戻る

CVE-2002-0348

HIGH

7.5

CVSS Severity Score

EPSS Score0.1200%

EPSS Percentile28.92th

Published2002年6月25日

Last Modified2026年4月16日

Vulnerability Description

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.

Affected Platforms (CPE)

🔌

Sun

Cobalt Raq 2

All versions

🔌

Sun

Cobalt Raq 3i

All versions

🔌

Sun

Cobalt Raq 4

All versions

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=101495944202452&w=2

🔗 http://www.iss.net/security_center/static/8323.php

🔗 http://www.securityfocus.com/bid/4209

🔗 http://marc.info/?l=bugtraq&m=101495944202452&w=2

🔗 http://www.iss.net/security_center/static/8323.php

🔗 http://www.securityfocus.com/bid/4209

関連する脆弱性情報

CVE-1999-040810.0

Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are acc...

CVE-2002-136110.0

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute a...

CVE-2002-03467.5

Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via J...

CVE-2002-03475.0

Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files out...