63 matches found
CVE-2002-0347
CVE-2002-0347 Cobalt RAQ 4의 디렉터리 트래버설 취약점으로, 원격 공격자가 HTTP 요청에 .. 점 두 개을 사용하여 비밀번호로 보호된 파일 및 웹 루트 외부의 파일을 읽을 수 있습니다. Packetstorm 게시물: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 게시물: https://www.securityfocus.com/bid/4208 작성자 Alex Hernandez 일명 @alt3kx 공급업체 응답:...
CVE-2002-0348
CVE-2002-0348 Cobalt RAQ 4의 service.cgi는 원격 공격자가 서비스 거부를 일으킬 수 있게 합니다. Packetstorm 게시물: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 게시물: https://www.securityfocus.com/bid/4209 저자 Alex Hernandez 일명 @alt3kx 공급업체 응답: 공급업체에 통보되었습니다. Security cobalt 목록에 게시됨:...
CVE-2002-0346
CVE-2002-0346 Cobalt RAQ 4의 크로스 사이트 스크립팅 취약점으로 인해 원격 공격자가 Javascript를 포함한 URL을 통해 1 service.cgi 또는 2 alert.cgi에서 다른 Cobalt 사용자로 임의 스크립트를 실행할 수 있습니다. Packetstorm 게시물: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 게시물: https://www.securityfocus.com/bid/4211 작성자...
EUVD-1999-1511
Malware in sbrugna...
EUVD-1999-0408
Malware in sbrugna...
EUVD-2002-0345
Malware in sbrugna...
EUVD-2002-0344
Malware in sbrugna...
EUVD-2002-0343
Malware in sbrugna...
CVE-1999-0408
Files created from interactive shell sessions in Cobalt RaQ microservers e.g. .bashhistory are world readable, and thus are accessible from the web server...
Sun Cobalt RaQ 1.1/2.0/3.0/4.0 Message.CGI Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8757/info A problem with message.cgi script used by Cobalt RaQ appliances could lead to cross-site scripting. This could result in attacks attempting to steal authentication information...
Cobalt RaQ 2.0/3.0 Apache .htaccess Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1083/info The default configuration of Cobalt Raq2 and Raq3 servers allows remote access to .htaccess files. This could lead to unauthorized retrieval of username and password information for restricted portions of a...
Cobalt RaQ 2.0/3.0,qpopper 2.52/2.53 'EUIDL' Format String Input Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1242/info A vulnerability exists in version 2.53 and prior of qpopper, a popular POP server, from Qualcomm. By placing machine executable code in the X-UIDL header field, supplying formatting strings in the From: field in...
Cobalt RaQ authenticate Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5695/info Sun has released an advisory warning that it is possible for local users to escalate priveleges on Sun/Cobalt RaQ or Qube systems, by exploiting a vulnerability located in /usr/lib/authenticate. !/bin/sh Cobalt...
Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently protected from outside access. While other...
Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/4252/info Cobalt RaQ is a server appliance for Internet-based services. It is distributed and maintained by Sun Microsystems. The 'MultiFileUpload.php' script is not sufficiently protected from outside access. While other...
Sun Cobalt RAQ Server Detection
Binary data 2741.prm...
CVE-2002-1361
CVE-2002-1361 affects Sun Cobalt RaQ4 with the Security Hardening Patch (SHP) installed. The overflow.cgi CGI script did not properly filter input, allowing a POST to set the email parameter to shell metacharacters and enabling remote code execution with superuser privileges. Public sources descr...
CVE-2002-1361
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP Security Hardening Patch installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter...
CVE-2002-1361: Undefined Security Weakness
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP Security Hardening Patch installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter...