CVE-2000-0234

CVE-2000-0234 affects the Cobalt RaQ2 and RaQ3 appliances via the default access.conf configuration, which permits remote attackers to view the contents of a ".htaccess" file. The root cause is the default configuration allowing this exposure, leading to partial confidentiality impact. The connec...

CVE-1999-1530

CVE-1999-1530 affects Cobalt RaQ2/RaQ3i environments where the cgiwrap component fails to properly identify users when running scripts. This allows a malicious site administrator to view or modify data located at another virtual site on the same system. The vulnerability is documented in CVE-1999...

CVE-2000-0442

CVE-2000-0442 affects qpopper 2.53 and earlier. A formatting string vulnerability in the From: header processed by the UIDL/euidl path allows local users to gain privileges (to group ID mail) and potentially execute arbitrary code. This is supported by multiple sources (NVD entry, FreeBSD VuXML/O...

CVE-2000-0431

Cobalt RaQ2/RaQ3 systems with FrontPage uploads expose a permissions/ownership misconfiguration that allows bypassing cgiwrap and modifying uploaded files. The issue is documented in CVE-2000-0431 with references in NVD/CVE records and corroborated by OpenVAS/Nessus entries mentioning cgiwrap vul...

CVE-2000-0117

On Cobalt RaQ2 servers, the siteUserMod.cgi CGI allows a Site Administrator to modify passwords for other users, including other Site Administrators and possibly the admin (root). This is a local vulnerability with high impact (confidentiality, integrity, availability) per CVSS 2.0 base score 7.2...

CVE-1999-0831

The CVE-1999-0831 entry describes a denial-of-service affecting Linux syslogd caused by a large number of concurrent connections. According to the description, the vulnerability impacts availability (partial) with no confidentiality or integrity impact. No vendor/version specifics or remediation ...

CVE-2002-0348

CVE-2002-0348: The vulnerability affects Cobalt RAQ 4, where service.cgi is susceptible to a long argument leading to remote denial of service and potential arbitrary code execution. The available sources describe the issue framework (remote access via network, low complexity, partial confidentia...

CVE-2000-0320

CVE-2000-0320 affects Qpopper 2.53 and 3.0, where the POP server fails to correctly identify the end-of-message delimiter, allowing a remote attacker to cause denial of service or mailbox corruption via a crafted 1023-character line ending with a newline. Root cause: improper parsing of the end-o...

CVE-2002-0347

The CVE-2002-0347 entry concerns a directory traversal vulnerability in the Cobalt RAQ 4 web server. An attacker can leverage a .. (dot dot) in an HTTP request to read files, including password-protected files, and potentially access files outside the web root. The issue is described in the NVD e...

CVE-2002-0430

CVE-2002-0430 affects the Sun Cobalt RaQ XTR admin interface. The MultiFileUploadHandler.php allows a local attacker to bypass authentication via a symlink attack on a temporary file, then trigger MultiFileUpload.php to overwrite arbitrary files. The vulnerability is local with high attack comple...

CVE-1999-0722

The CVE-1999-0722 entry concerns Cobalt RaQ2 servers. The provided documents state that the default configuration allows remote users to install arbitrary software packages, indicating a permission/config issue in the default setup. No concrete exploit details, affected software versions, root ca...

CVE-2002-0346

Technical details about CVE-2002-0346 are not publicly provided in the supplied documents. The connected EUVD/OpenVAS entries reference the CVE but do not disclose affected products, versions, root cause, or remediation. Monitor for updates.