Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sun cobalt raq 2 vulnerabilities and exploits
(subscribe to this query)
890
VMScore
CVE-1999-0722
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.
Sun Cobalt Raq 2
755
VMScore
CVE-2000-0442
Qpopper 2.53 and previous versions allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
Qualcomm Qpopper 2.52
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
Qualcomm Qpopper 2.53
1 EDB exploit
668
VMScore
CVE-2002-0346
Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote malicious users to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
Sun Cobalt Raq 4
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
1 Github repository
668
VMScore
CVE-2002-0348
service.cgi in Cobalt RAQ 4 allows remote malicious users to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
Sun Cobalt Raq 4
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
1 Github repository
668
VMScore
CVE-2000-0431
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows malicious users to bypass cgiwrap and modify files.
Sun Cobalt Raq 3i
Sun Cobalt Raq 2
641
VMScore
CVE-2000-0117
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
Sun Cobalt Raq 1.0
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
505
VMScore
CVE-2000-0234
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote malicious users to view sensitive contents of a .htaccess file.
Sun Cobalt Raq 3i
Sun Cobalt Raq 2
1 EDB exploit
445
VMScore
CVE-2002-1344
Directory traversal vulnerability in wget prior to 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.
Gnu Wget 1.8
Gnu Wget 1.8.1
Gnu Wget 1.5.3
Gnu Wget 1.6
Gnu Wget 1.8.2
Sun Cobalt Raq Xtr
Gnu Wget 1.7
Gnu Wget 1.7.1
445
VMScore
CVE-2002-0347
Directory traversal vulnerability in Cobalt RAQ 4 allows remote malicious users to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
Sun Cobalt Raq 4
Sun Cobalt Raq 2
Sun Cobalt Raq 3i
1 Github repository
445
VMScore
CVE-2000-0320
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote malicious user to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
Qualcomm Qpopper 2.53
Sun Cobalt Raq 3i
Sun Cobalt Raq 2
Qualcomm Qpopper 3.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »