Vulnerability Details : CVE-2002-0430
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Exploit prediction scoring system (EPSS) score for CVE-2002-0430
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ % EPSS Score History EPSS FAQ
CVSS scores for CVE-2002-0430
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
3.7
|
LOW | AV:L/AC:H/Au:N/C:P/I:P/A:P |
1.9
|
6.4
|
NIST |
References for CVE-2002-0430
Products affected by CVE-2002-0430
- cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*
- cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*
- cpe:2.3:h:sun:cobalt_raq_4:*:*:*:*:*:*:*:*