1930 matches found
CVE-1999-0408
Files created from interactive shell sessions in Cobalt RaQ microservers e.g. .bashhistory are world readable, and thus are accessible from the web server...
CVE-1999-0408
CVE-1999-0408 affects Cobalt RaQ microservers, where files created from interactive shell sessions (for example, .bash_history) become world-readable and accessible from the web server. The linked sources (NVD/Red Hat/CVE listings) describe the issue as exposing shell-history contents to web user...
CVE-1999-0722: Undefined Security Weakness
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages...
CVE-1999-0408: Undefined Security Weakness
Files created from interactive shell sessions in Cobalt RaQ microservers e.g. .bashhistory are world readable, and thus are accessible from the web server...
Cobalt RaQ2 cgiwrap Multiple Vulnerabilities
The remote host has 'cgiwrap' is installed. If you are running an unpatched Cobalt RaQ, the version of cgiwrap distributed with that system has a known security flaw that lets anyone execute arbitrary commands with the privileges of the http daemon root or nobody. This flaw exists only on the...
cobalt.cgiwrap.txt
There is a problem actually several with the "cgiwrap" program on Cobalt RaQ2 servers. It is supposed to run CGI programs as the proper user instead of "nobody" to make CGIs a little more secure. The Cobalt directory structure is as follows: /home/sites/site1/ - top level directory of the site...
CVE-1999-1530
cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system...
cobalt.raq.txt
Date: Thu, 25 Feb 1999 07:59:30 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Teenager Finds Web-server hole. Forwarded From: William Knowles http://www.wired.com/news/printversion/technology/story/18109.html?wnpg=all Wired.com 2.25.99 A 17-year-old Pennsylvania high school student has...