CVE-1999-1530 - cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain

CVE-1999-1530

Summary

cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.

References

http://marc.info/?l=bugtraq&m=94209954200450&w=2
http://marc.info/?l=bugtraq&m=94225629200045&w=2
http://www.iss.net/security_center/static/7764.php
http://www.osvdb.org/35
http://www.securityfocus.com/bid/777

Vulnerable Configurations

cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*
cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*

CVSS

Base:	3.6 (as of 18-10-2016 - 02:05)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:N

refmap via4

bid	777
bugtraq	19991108 Security flaw in Cobalt RaQ2 cgiwrap 19991109 [Cobalt] Security Advisory - cgiwrap
osvdb	35
xf	cobalt-cgiwrap-incorrect-permissions(7764)

Last major update

18-10-2016 - 02:05

Published

08-11-1999 - 05:00

Last modified

18-10-2016 - 02:05