Lucene search
HistoryMay 22, 2000 - 4:00 a.m.
CVE-2000-0431
cobalt raq2
cobalt raq3
access permissions
file modification
security breach
6.7 Medium
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.036 Low
EPSS
Percentile
91.5%
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:cobalt_raq_3i | sun cobalt raq 3i | eq | * |
| sun:cobalt_raq_2 | sun cobalt raq 2 | eq | * |
Related
openvas
openvas
Cobalt RaQ2 cgiwrap
2005-11-03 00:00:00
nessus
nessus
Cobalt RaQ2 cgiwrap Multiple Vulnerabilities
1999-12-15 00:00:00
6.7 Medium
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.036 Low
EPSS
Percentile
91.5%
Related for CVE-2000-0431