CVE-2002-0430

Published: Aug 12, 2002Modified: Apr 16, 2026

3.7

Vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 1.9 / Impact: 6.4

Source: NVD

Description

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.

Affected (3)

Products: Sun: Cobalt Raq 2, Cobalt Raq 3i, Cobalt Raq 4

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Sun Cobalt Raq 2	All versions
Sun Cobalt Raq 3i	All versions
Sun Cobalt Raq 4	All versions

References (4)

http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/4252

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/bid/4252

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.