CVE-2002-0430

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.

Score

CVSS 2.0 3.7 Low

Status

Modified - cve@mitre.org

Published

2002-08-12

Last modified

2024-08-08

Affected products

• Cobalt Raq 2 (Sun)
• Cobalt Raq 3i (Sun)
• Cobalt Raq 4 (Sun)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html
• http://www.securityfocus.com/bid/4252