PT-2000-1372 · Microsoft+1 · Frontpage+2

Publicado 2000-05-22 · Atualizado 2008-09-10 · CVE-2000-0431

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cobalt RaQ2 and RaQ3 (affected versions not specified)

Description The issue concerns improper setting of access permissions and ownership for files uploaded via FrontPage, allowing attackers to bypass cgiwrap and modify files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2000-0431

Produtos afetados

Cobalt Raq2

Cobalt Raq3

Frontpage

Referências · 5

• http://osvdb.org/1346 · Nota
• http://securityfocus.com/bid/1238 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html · Nota
• http://securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0431 · Nota de Segurança