Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-1058

EPSS 6.48% · P91
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-1058

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cobalt Qube验证可绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cobalt Qube是一款SUN推出的电器型服务器产品。 Cobalt Qube的验证机制对用户输入缺少正确过滤，远程攻击者可以利用这个漏洞获得管理员权限进行各种操作。 Cobalt Qube的验证机制不够强壮，由于Cobalt Qube的验证机制没有正确验证由客户端Cookie中提供的输入，攻击者可以进行权限提升操作，或者引用服务器系统上的文件指为包含会话KEY的文件，利用验证服务漏洞，以管理员权限对这个引用的文件进行操作，如删除/etc/passwd文件中的部分内容。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-1058

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-1058

请登录查看更多情报信息。

Same Patch Batch · n/a · 2002-08-31 · 162 CVEs total

CVE-2002-1018Adobe Content Server library拒绝服务漏洞
CVE-2002-1003MyWebServer GET请求远程缓冲区溢出漏洞
CVE-2002-1005ArGoSoft Mail Server Pro 1.8.1.7远程拒绝服务漏洞
CVE-2002-1007Blackboard跨站脚本漏洞
CVE-2002-1008Summit Computer Networks Lil' HTTP Server URLCount.CGI HTML注入漏洞
CVE-2002-1009Summit Computer Networks Lil' HTTP Server pbcgi.cgi跨站脚本攻击（XSS）漏洞
CVE-2002-1010Lotus Domino绕过web根中的访问限制漏洞
CVE-2002-1011IBM Tivoli Management Framework Endpoint缓冲区溢出漏洞
CVE-2002-1012IBM Tivoli Management Framework 管理节点机WEB服务远程缓冲区溢出漏洞
CVE-2002-1016Adobe eBook Reader文件保护限制可突破漏洞
CVE-2002-1017Adobe eBook Reader文件传送授权凭证弱算法漏洞
CVE-2002-1023Working Resources BadBlue GET请求远程拒绝服务攻击漏洞
CVE-2002-1029WorldSpan Res Manager畸形TCP数据包服务拒绝漏洞
CVE-2002-1028Oddsock Song Requester WinAmp Plugin服务拒绝漏洞
CVE-2002-1027Macromedia Sitespring默认出错页面跨站脚本漏洞
CVE-2002-1026Macromedia Sitespring数据库引擎远程拒绝服务攻击漏洞
CVE-2002-1021Working Resources BadBlue NULL字节远程文件泄露漏洞
CVE-2002-1019Adobe Content Server library eBook检验漏洞
CVE-2002-1020Adobe Content Server library eBook检验漏洞
CVE-2002-1001AnalogX Proxy Socks4A远程缓冲区溢出漏洞

Showing top 20 of 162 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-1058

No comments yet

Leave a comment