CVE-2000-0117: High severity Sun Cobalt Raq 3i vulnerability

Published Jan 30, 2000
·
Updated

The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).

Affected Software

3 affected components
Sun Cobalt Raq 3i
Sun Cobalt Raq 2
Sun Cobalt Raq=1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Remove

    Remove Sun Cobalt RaQ siteUserMod.cgi from your environment.

    Delete or remove the siteUserMod.cgi script from the server (or from any web-accessible cgi-bin) if it is not required.

  2. Configuration

    Disable execution of the siteUserMod.cgi script (for example, remove execute permissions, move/rename the script, or update web server config to prevent access) to stop Site Administrators from using it to change other users' passwords.

    Cobalt RaQ (siteUserMod.cgi) siteUserMod.cgi executable = disabled
  3. Compensating control

    Restrict access to RaQ administrative interfaces and Site Administrator functions to trusted IP ranges or via VPN, and limit assignment of Site Administrator privileges until the issue is remediated.

  4. Operational

    Audit accounts and logs for unauthorized password changes; rotate passwords for site administrator accounts, user accounts, and the admin (root) account that may have been modified.

Event History

Jan 30, 2000
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Oct 13, 2000
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2000-0117?

CVE-2000-0117 is considered a high severity vulnerability due to its ability to allow unauthorized password modifications.

2

How do I fix CVE-2000-0117?

To fix CVE-2000-0117, ensure that siteUserMod.cgi is secured and access is restricted to authorized users only.

3

Which systems are affected by CVE-2000-0117?

CVE-2000-0117 affects Sun Cobalt RaQ servers, including versions 1.0, 2, and 3i.

4

Can CVE-2000-0117 lead to a complete system compromise?

Yes, CVE-2000-0117 can lead to complete system compromise since it allows unauthorized access to modify admin passwords.

5

What is the potential impact of exploiting CVE-2000-0117?

Exploiting CVE-2000-0117 could allow an attacker to take control of user accounts and potentially gain full administrative access.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203
CVE-2000-0117 - High severity Sun Cobalt Raq 3i vulnerability - SecAlerts