CVE-2002-0347 Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
MediumCVSS 5.0
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun cobalt raq 2 | All versions | No fix listed |
| sun cobalt raq 3i | All versions | No fix listed |
| sun cobalt raq 4 | All versions | No fix listed |
References
- 20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities mailing-list
- cobalt-raq-directory-traversal(8322) vdb-entry vendor-advisory
- 4208 patch vdb-entry vendor-advisory