Approved changes feed: RSS · Atom

cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductCobalt Raq 2 (c7af710d-f85c-50d1-b21a-b5d7815c4dfc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-0430 vulnerable 2026-06-08 04:46:21.438922 Details available
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:28.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0348 vulnerable 2026-06-08 04:46:21.239553 Details available
service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:49:27.387Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0347 vulnerable 2026-06-08 04:46:21.239201 Details available
Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:49:28.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0346 vulnerable 2026-06-08 04:46:21.237749 Details available
Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:49:27.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0442 vulnerable 2026-06-08 04:45:17.998161 Details available
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
Published: 2000-07-12T04:00:00.000Z
Updated: 2024-08-08T05:21:30.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0431 vulnerable 2026-06-08 04:45:17.931058 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0320 vulnerable 2026-06-08 04:44:58.453799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0234 vulnerable 2026-06-08 04:44:58.427547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0117 vulnerable 2026-06-08 04:44:58.392644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1530 vulnerable 2026-06-08 04:44:58.335741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0831 vulnerable 2026-06-08 04:44:58.128994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0722 vulnerable 2026-06-08 04:44:58.097977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.