World Readable Files in Cobalt RaQ Microservers
CVE-1999-0408

Currently unrated

Key Information:

Vendor
Oracle
Vendor
CVE Published:
25 February 1999

Summary

In Cobalt RaQ microservers, files generated during interactive shell sessions, such as .bash_history, are configured to be world readable. This misconfiguration allows unauthorized users to access sensitive command history files via the web server, potentially exposing critical operational commands and credentials. Remediation involves modifying file permissions to restrict access and enhance server security.

References

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.