Vulnerability Details CVE-2000-0431
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html
- http://www.osvdb.org/1346
- http://www.securityfocus.com/bid/1238
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html
- http://www.osvdb.org/1346
- http://www.securityfocus.com/bid/1238
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net
Products affected by CVE-2000-0431
-
cpe:2.3:h:sun:cobalt_raq_2:-
-
cpe:2.3:h:sun:cobalt_raq_3i:-