Approved changes feed: RSS · Atom

cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductCobalt Raq 3I (872b2398-8304-5179-8cd1-a2b755f5767d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-0430 vulnerable 2026-06-08 04:46:21.438947 Details available
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:28.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0348 vulnerable 2026-06-08 04:46:21.239576 Details available
service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:49:27.387Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0347 vulnerable 2026-06-08 04:46:21.239227 Details available
Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:49:28.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0346 vulnerable 2026-06-08 04:46:21.238310 Details available
Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:49:27.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1075 vulnerable 2026-06-08 04:45:21.402008 Details available
poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.
Published: 2002-03-09T05:00:00.000Z
Updated: 2024-08-08T04:44:08.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0442 vulnerable 2026-06-08 04:45:17.998187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0431 vulnerable 2026-06-08 04:45:17.932380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0320 vulnerable 2026-06-08 04:44:58.453817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0234 vulnerable 2026-06-08 04:44:58.427569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0117 vulnerable 2026-06-08 04:44:58.392664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1530 vulnerable 2026-06-08 04:44:58.335762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0831 vulnerable 2026-06-08 04:44:58.129011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.