Unscored CVE-2000-0431 EUVD-2000-0430GHSA-7qpm-q5rp-cvqf

Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows att…

Published Jul 12, 2000 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.

References

20000522 Problem with FrontPage on Cobalt RaQ2/RaQ3 mailing-list
http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html
1346 vdb-entry
1238 vdb-entry