Lucene search

K
nvd[email protected]NVD:CVE-2002-0430
HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0430

2002-08-1204:00:00
web.nvd.nist.gov
4

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

0.4%

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.

Affected configurations

Nvd
Node
suncobalt_raq_2
OR
suncobalt_raq_3i
OR
suncobalt_raq_4
VendorProductVersionCPE
suncobalt_raq_2*cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*
suncobalt_raq_3i*cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*
suncobalt_raq_4*cpe:2.3:h:sun:cobalt_raq_4:*:*:*:*:*:*:*:*

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

0.4%

Related for NVD:CVE-2002-0430