Cobalt Raq 2 (Sun) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2002-08-12. Vendor: Sun.
CVEs of Cobalt Raq 2
- CVE-2002-0430 - CVSS 3.7 (low), 2002-08-12: MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a…
- CVE-2002-0346 - CVSS 7.5 (high), 2002-06-25: Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1)…
- CVE-2002-0348 - CVSS 7.5 (high), 2002-06-25: service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
- CVE-2002-0347 - CVSS 5 (medium), 2002-06-25: Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a ..…
- CVE-2000-0442 - CVSS 7.5 (high), 2000-05-24: Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
- CVE-2000-0431 - CVSS 7.5 (high), 2000-05-22: Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass…
- CVE-2000-0320 - CVSS 5 (medium), 2000-04-21: Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of…
- CVE-2000-0234 - CVSS 5 (medium), 2000-03-31: The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
- CVE-2000-0117 - CVSS 7.2 (high), 2000-01-30: The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin…
- CVE-1999-0831 - CVSS 5 (medium), 1999-11-19: Denial of service in Linux syslogd via a large number of connections.
- CVE-1999-1530 - CVSS 3.6 (low), 1999-11-08: cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to…
- CVE-1999-0722 - CVSS 10 (critical), 1999-08-08: The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
