Description
cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.
References
- 777 vdb-entry
- cobalt-cgiwrap-incorrect-permissions(7764) vdb-entry
- 35 vdb-entry
- 19991109 [Cobalt] Security Advisory - cgiwrap mailing-list
- 19991108 Security flaw in Cobalt RaQ2 cgiwrap mailing-list