Vulnerabilities > CVE-2002-0430 - Unspecified vulnerability in SUN Cobalt RAQ 2, Cobalt RAQ 3I and Cobalt RAQ 4
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN sun
exploit available
Summary
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Hardware | 3 |
Exploit-Db
description Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability. CVE-2002-0430. Remote exploit for php platform id EDB-ID:21334 last seen 2016-02-02 modified 2002-03-08 published 2002-03-08 reporter Wouter ter Maat source https://www.exploit-db.com/download/21334/ title Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability 1 description Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability (2). CVE-2002-0430. Remote exploit for php platform id EDB-ID:21335 last seen 2016-02-02 modified 2002-03-08 published 2002-03-08 reporter Wouter ter Maat source https://www.exploit-db.com/download/21335/ title Cobalt RaQ 2.0/3.0/4.0 XTR MultiFileUpload.php Authentication Bypass Vulnerability 2