Security Advisory

CVE-2002-0430

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-06-11 04:00:00
Last updated 2024-08-08 02:49:28
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.