Cobalt RaQ2 cgiwrap Multiple Vulnerabilities

high Nessus Plugin ID 10041

Synopsis

The remote host contains an application that is affected by multiple vulnerabilities.

Description

The remote host has 'cgiwrap' is installed. If you are running an unpatched Cobalt RaQ, the version of cgiwrap distributed with that system has a known security flaw that lets anyone execute arbitrary commands with the privileges of the http daemon (root or nobody).

This flaw exists only on the Cobalt modified cgiwrap. Standard builds of cgiwrap are not affected.

Solution

Cobalt Networks has released a patch that addresses the vulnerability.

Plugin Details

Severity: High

ID: 10041

File Name: cgiwrap.nasl

Version: 1.38

Type: remote

Family: CGI abuses

Published: 12/15/1999

Updated: 1/19/2021

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.2

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Required KB Items: Settings/ParanoidReport

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 11/8/1999

Reference Information

CVE: CVE-1999-1530, CVE-2000-0431

BID: 777, 1238

Detections

Analytics