World Readable Files in Cobalt RaQ Microservers
CVE-1999-0408
Currently unrated
Summary
In Cobalt RaQ microservers, files generated during interactive shell sessions, such as .bash_history, are configured to be world readable. This misconfiguration allows unauthorized users to access sensitive command history files via the web server, potentially exposing critical operational commands and credentials. Remediation involves modifying file permissions to restrict access and enhance server security.
References
Timeline
Vulnerability Reserved
Vulnerability published