CVE-2002-0430 — LOW (3.7) — White Hats Nepal

Vulnerability Description

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.

CVSS Score

3.7

LOW

AV:L/AC:H/Au:N/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Sun	Cobalt Raq 2	All versions
Sun	Cobalt Raq 3I	All versions
Sun	Cobalt Raq 4	All versions

References

http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.htmlExploitVendor Advisory
http://www.securityfocus.com/bid/4252
http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.htmlExploitVendor Advisory
http://www.securityfocus.com/bid/4252

FAQ

What is CVE-2002-0430?

CVE-2002-0430 is a vulnerability with a CVSS score of 3.7 (LOW). MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, follow...

How severe is CVE-2002-0430?

CVE-2002-0430 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2002-0430?

Check the references section above for vendor advisories and patch information. Affected products include: Sun Cobalt Raq 2, Sun Cobalt Raq 3I, Sun Cobalt Raq 4.