medium5.0Public exploit code
CVE-2000-0234
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cobalt RaQ 2.0/3.0 - Apache .htaccess Disclosure2000-03-31 · remote · multiple · Verified
Impact
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Cobalt Raq 2 | All versions |
| Sun | Cobalt Raq 3i | All versions |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/1083
- http://www.securityfocus.com/templates/advisory.html?id=2150
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000330220757.28456.qmail%40securityfocus.com
- http://www.securityfocus.com/bid/1083
- http://www.securityfocus.com/templates/advisory.html?id=2150
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000330220757.28456.qmail%40securityfocus.com