CVE-2002-1058
First published: Sat Aug 31 2002(Updated: )
Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cobalt Qube | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-1058?
CVE-2002-1058 is categorized as a high-severity vulnerability due to its potential to allow unauthorized access to system privileges.
How do I fix CVE-2002-1058?
To fix CVE-2002-1058, ensure that the affected Cobalt Qube 3.0 software is updated to a patched version or apply configuration changes to mitigate directory traversal.
Who is affected by CVE-2002-1058?
CVE-2002-1058 affects users and administrators of Cobalt Qube version 3.0, allowing both local and remote attackers to exploit the vulnerability.
What type of vulnerability is CVE-2002-1058?
CVE-2002-1058 is a directory traversal vulnerability that allows the manipulation of session ID cookies to gain unauthorized access.
Can CVE-2002-1058 be exploited remotely?
Yes, CVE-2002-1058 can be exploited remotely by attackers using crafted requests to compromise Qube Admin privileges.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/tags
- agent/author
- agent/event
- agent/source
- vendor/cobalt
- canonical/cobalt qube
- version/cobalt qube/3.0