low3.7Public exploit code
CVE-2002-0430
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a s…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cobalt RaQ 2.0/3.0/4.0 XTR - 'MultiFileUpload.php' Authentication Bypass (2)2002-03-08 · remote · php · Verified
- Cobalt RaQ 2.0/3.0/4.0 XTR - 'MultiFileUpload.php' Authentication Bypass (1)2002-03-08 · remote · php · Verified
Impact
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Cobalt Raq 2 | All versions |
| Sun | Cobalt Raq 3i | All versions |
| Sun | Cobalt Raq 4 | All versions |