56 matches found
CVE-2002-0347
CVE-2002-0347 Cobalt RAQ 4 にはディレクトリトラバーサルの脆弱性があり、リモートの攻撃者が HTTP リクエスト内の ..（ドットドット）を使用して、パスワードで保護されたファイルや、Web ルート外のファイルを読み取ることが可能です。 Packetstorm 公開記事: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 公開記事: https://www.securityfocus.com/bid/4208 作者 Alex Hernandez 別名...
CVE-2002-0348
CVE-2002-0348 Cobalt RAQ 4のservice.cgiにより、リモート攻撃者がサービス拒否を引き起こす可能性があります Packetstorm公開: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus公開: https://www.securityfocus.com/bid/4209 著者 Alex Hernandez 別名 @alt3kx ベンダーの応答: ベンダーに通知済み 公開リスト セキュリティcobalt:...
CVE-2002-0346
CVE-2002-0346 Cobalt RAQ 4 のクロスサイトスクリプティングの脆弱性により、リモートの攻撃者が 1 service.cgi または 2 alert.cgi への URL 内の JavaScript を介して、他の Cobalt ユーザーとして任意のスクリプトを実行できる可能性があります。 Packetstorm 公開: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 公開: https://www.securityfocus.com/bid/4211...
EUVD-2002-0343
Malware in sbrugna...
EUVD-2002-0344
Malware in sbrugna...
EUVD-2002-0345
Malware in sbrugna...
EUVD-1999-1511
Malware in sbrugna...
EUVD-1999-0408
Malware in sbrugna...
CVE-1999-0408
Files created from interactive shell sessions in Cobalt RaQ microservers e.g. .bashhistory are world readable, and thus are accessible from the web server...
Cobalt RaQ 2.0/3.0 Apache .htaccess Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1083/info The default configuration of Cobalt Raq2 and Raq3 servers allows remote access to .htaccess files. This could lead to unauthorized retrieval of username and password information for restricted portions of a...
Cobalt RaQ 2.0/3.0,qpopper 2.52/2.53 'EUIDL' Format String Input Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1242/info A vulnerability exists in version 2.53 and prior of qpopper, a popular POP server, from Qualcomm. By placing machine executable code in the X-UIDL header field, supplying formatting strings in the From: field in...
Cobalt RaQ authenticate Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5695/info Sun has released an advisory warning that it is possible for local users to escalate priveleges on Sun/Cobalt RaQ or Qube systems, by exploiting a vulnerability located in /usr/lib/authenticate. !/bin/sh Cobalt...
Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently protected from outside access. While other...
Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently protected from outside access. While other...
Sun Cobalt RaQ 1.1/2.0/3.0/4.0 Message.CGI Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8757/info A problem with message.cgi script used by Cobalt RaQ appliances could lead to cross-site scripting. This could result in attacks attempting to steal authentication information...
Sun Cobalt RAQ Server Detection
Binary data 2741.prm...
CVE-2002-1361
CVE-2002-1361 affects Sun Cobalt RaQ4 with the Security Hardening Patch (SHP) installed. The overflow.cgi CGI script did not properly filter input, allowing a POST to set the email parameter to shell metacharacters and enabling remote code execution with superuser privileges. Public sources descr...
CVE-2002-1361
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP Security Hardening Patch installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter...
