CVE-2002-0430
Sun Cobalt RaQ XTR - Unauthenticated Arbitrary File Write via Symlink Attack on Temporary File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2002-0430. PoCs published by Wouter ter Maat.
AI-analyzed exploit summary This exploit targets CVE-2002-0430 in Cobalt RaQ's 'MultiFileUpload.php' script, which lacks authentication. It allows file uploads with predictable filenames in '/tmp', enabling local attackers to overwrite files via symlinks, potentially leading to privilege escalation.
Description
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Exploits (2)
This exploit targets CVE-2002-0430 in Cobalt RaQ's 'MultiFileUpload.php' script, which lacks authentication. It allows file uploads with predictable filenames in '/tmp', enabling local attackers to overwrite files via symlinks, potentially leading to privilege escalation.
This exploit targets an authentication bypass in Cobalt RaQ's 'MultiFileUpload.php' script, allowing unauthenticated file uploads. The PoC generates predictable filenames for a race condition attack, potentially leading to local privilege escalation or DoS.