CVE-2002-0430

Currently unrated

Key Information:

Vendor
Oracle
Status
Cobalt Raq 3i
Cobalt Raq 2
Cobalt Raq 4
Vendor
CVE Published:
12 August 2002

Summary

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.

References

http://www.securityfocus.com/bid/4252
vdb-entryx_refsource_BID
http://archives.neohapsis.com/archives/bugtraq/2002-03/00...
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.