CVE-2000-0431: High severity Sun Cobalt Raq 3i vulnerability
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Sun Cobalt RaQ FrontPage extensionsfrom your environment.Uninstall or remove FrontPage Server Extensions or any FrontPage upload handlers from the RaQ appliance if they are not required.
- Configuration
Disable FrontPage uploads or the FrontPage Server Extensions on the RaQ appliance to prevent uploaded files from inheriting incorrect permissions and bypassing cgiwrap.
Sun Cobalt RaQ FrontPage uploads / FrontPage Server Extensions = disabled - Compensating control
Restrict access to FrontPage authoring/upload endpoints and the RaQ management interface using firewall rules or ACLs to trusted IP addresses to reduce exposure while fixes or removals are implemented.
- Operational
Audit files uploaded via FrontPage on the RaQ for incorrect ownership and permissions; correct ownership and permissions and ensure cgiwrap protections are restored for affected scripts and executables.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0431?
CVE-2000-0431 is considered to have a moderate severity due to its ability to allow unauthorized file modifications.
How do I fix CVE-2000-0431?
To fix CVE-2000-0431, ensure proper access permissions and ownership settings for uploaded files on Cobalt RaQ2 and RaQ3.
What versions are affected by CVE-2000-0431?
CVE-2000-0431 affects Sun Cobalt RaQ2 and RaQ3 systems.
Can CVE-2000-0431 lead to a security breach?
Yes, CVE-2000-0431 can lead to a security breach by allowing attackers to bypass cgiwrap and modify files.
Is CVE-2000-0431 still a concern today?
While CVE-2000-0431 is an older vulnerability, it can still pose a risk if legacy systems are in use without proper updates and security measures.