GCVE - cpe:2.3:h:sun:cobalt_raq_4:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:sun:cobalt_raq_4:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Sun (`f793a52f-9733-5503-ba70-29fa391cdd2b`)
Product	Cobalt Raq 4 (`15854a14-8610-5709-a4ff-61c402940065`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2002-1361`	vulnerable	2026-06-08 04:46:23.521636	Details available overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter. Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T03:19:28.568Z Open on db.gcve.eu Reference links http://www.ciac.org/ciac/bulletins/n-025.shtml http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377 https://exchange.xforce.ibmcloud.com/vulnerabilities/10776 http://www.cert.org/advisories/CA-2002-35.html http://www.kb.cert.org/vuls/id/810921	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0430`	vulnerable	2026-06-08 04:46:21.438967	Details available MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php. Published: 2002-06-11T04:00:00.000Z Updated: 2024-08-08T02:49:28.468Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/4252 http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0348`	vulnerable	2026-06-08 04:46:21.239596	Details available service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument. Published: 2002-05-03T04:00:00.000Z Updated: 2024-08-08T02:49:27.387Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/4209 http://marc.info/?l=bugtraq&m=101495944202452&w=2 http://www.iss.net/security_center/static/8323.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0347`	vulnerable	2026-06-08 04:46:21.239248	Details available Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request. Published: 2002-05-03T04:00:00.000Z Updated: 2024-08-08T02:49:28.210Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=101495944202452&w=2 http://www.securityfocus.com/bid/4208 http://www.iss.net/security_center/static/8322.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0346`	vulnerable	2026-06-08 04:46:21.238821	Details available Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi. Published: 2002-05-03T04:00:00.000Z Updated: 2024-08-08T02:49:27.332Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/8321.php http://marc.info/?l=bugtraq&m=101495944202452&w=2 http://www.securityfocus.com/bid/4211	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.