Vulnerability Name:

CVE-2000-0431 (CCN-4531)

Assigned:2000-05-22
Published:2000-05-22
Updated:2008-09-10
Summary:Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
References:Source: CCN
Type: BugTraq Mailing List, Tue May 23 2000 - 10:00:45 CDT
Problem with FrontPage on Cobalt RaQ2/RaQ3

Source: CCN
Type: BugTraq Mailing List, Thu May 25 2000 - 04:17:16 CDT
Cobalt Networks - Security Advisory - Frontpage

Source: CONFIRM
Type: UNKNOWN
http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html

Source: MITRE
Type: CNA
CVE-2000-0431

Source: OSVDB
Type: UNKNOWN
1346

Source: CCN
Type: OSVDB ID: 1346
Cobalt RaQ cgiwrap User Bypass

Source: BID
Type: Patch, Vendor Advisory
1238

Source: CCN
Type: BID-1238
Cobalt RaQ2/RaQ3 Web Server Appliance cgiwrap bypass Vulnerability

Source: BUGTRAQ
Type: UNKNOWN
20000522 Problem with FrontPage on Cobalt RaQ2/RaQ3

Source: XF
Type: UNKNOWN
cobalt-cgiwrap-bypass(4531)

Vulnerable Configuration:Configuration 1:
  • cpe:/h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*
  • OR cpe:/h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:sun:cobalt_raq:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    sun cobalt raq 2 *
    sun cobalt raq 3i *
    sun cobalt raq *