CVE-2002-0347

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=101495944202452&w=2
http://www.iss.net/security_center/static/8322.phpVendor Advisory
http://www.securityfocus.com/bid/4208Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=101495944202452&w=2
http://www.iss.net/security_center/static/8322.phpVendor Advisory
http://www.securityfocus.com/bid/4208Patch, Vendor Advisory

Timeline

Published: Jun 25, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-03487.5service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service ar CVE-2002-03494.6Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which CVE-2002-03507.8HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the ma CVE-2002-03517.5Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denial of service and pos CVE-2002-03525.0Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php CVE-2002-03535.0The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, CVE-2002-03545.0The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories o CVE-2002-03552.1netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the ap CVE-2002-03567.2Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriti CVE-2002-03577.2Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.CVE-2002-03584.6MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which CVE-2002-035910.0xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those t