PT-2000-1372 · Microsoft+1 · Frontpage+2

Published 2000-05-22 · Updated 2008-09-10 · CVE-2000-0431

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cobalt RaQ2 and RaQ3 (affected versions not specified)

Description The issue concerns improper setting of access permissions and ownership for files uploaded via FrontPage, allowing attackers to bypass cgiwrap and modify files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0431

Affected Products

Cobalt Raq2

Cobalt Raq3

Frontpage

References · 5

• http://securityfocus.com/bid/1238 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0431 · Security Note
• http://osvdb.org/1346 · Note
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html · Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net · Note