CVE-2002-0430 MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, follow...
LowCVSS 3.7
EPSS 0.91%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun cobalt raq 2 | All versions | No fix listed |
| sun cobalt raq 3i | All versions | No fix listed |
| sun cobalt raq 4 | All versions | No fix listed |
References
- 20020308 Remote Cobalt Raq XTR vulns exploit mailing-list vendor-advisory
- 4252 vdb-entry