CVE-2000-0431 Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun cobalt raq 2 | All versions | No fix listed |
| sun cobalt raq 3i | All versions | No fix listed |
References
- archives.neohapsis.com
- 1346 vdb-entry
- 1238 patch vdb-entry vendor-advisory
- 20000522 Problem with FrontPage on Cobalt RaQ2/RaQ3 mailing-list