Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sun cobalt raq 2 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2002-1344
Directory traversal vulnerability in wget prior to 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.
Gnu Wget 1.8
Gnu Wget 1.8.1
Gnu Wget 1.5.3
Gnu Wget 1.6
Gnu Wget 1.8.2
Sun Cobalt Raq Xtr
Gnu Wget 1.7
Gnu Wget 1.7.1
NA
CVE-2002-0430
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
Sun Cobalt Raq 4
2 EDB exploits
NA
CVE-2002-0346
Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote malicious users to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
Sun Cobalt Raq 4
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
1 Github repository
NA
CVE-2002-0347
Directory traversal vulnerability in Cobalt RAQ 4 allows remote malicious users to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
Sun Cobalt Raq 4
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
1 Github repository
NA
CVE-2002-0348
service.cgi in Cobalt RAQ 4 allows remote malicious users to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
Sun Cobalt Raq 4
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
1 Github repository
NA
CVE-2000-0442
Qpopper 2.53 and previous versions allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
Qualcomm Qpopper 2.52
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
Qualcomm Qpopper 2.53
1 EDB exploit
NA
CVE-2000-0431
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows malicious users to bypass cgiwrap and modify files.
Sun Cobalt Raq 3i
Sun Cobalt Raq 2
NA
CVE-2000-0320
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote malicious user to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
Qualcomm Qpopper 2.53
Sun Cobalt Raq 3i
Sun Cobalt Raq 2
Qualcomm Qpopper 3.0
NA
CVE-2000-0234
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote malicious users to view sensitive contents of a .htaccess file.
Sun Cobalt Raq 3i
Sun Cobalt Raq 2
1 EDB exploit
NA
CVE-2000-0117
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
Sun Cobalt Raq 1.0
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
SSRF
buffer overflow
CVE-2023-28952
CVE-2023-41822
CVE-2024-27956
CVE-2023-7028
CVE-2024-34447
CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »