
CVE-2000-0234 – Cobalt RaQ 2.0/3.0 - Apache .htaccess Disclosure
https://notcve.org/view.php?id=CVE-2000-0234
31 Mar 2000 — The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file. • https://www.exploit-db.com/exploits/19828 •

CVE-2000-0117
https://notcve.org/view.php?id=CVE-2000-0117
30 Jan 2000 — The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root). • http://www.securityfocus.com/bid/951 •

CVE-1999-0831
https://notcve.org/view.php?id=CVE-1999-0831
19 Nov 1999 — Denial of service in Linux syslogd via a large number of connections. • ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-035.0.txt •

CVE-1999-1530
https://notcve.org/view.php?id=CVE-1999-1530
08 Nov 1999 — cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system. • http://marc.info/?l=bugtraq&m=94209954200450&w=2 •

CVE-1999-0722
https://notcve.org/view.php?id=CVE-1999-0722
08 Aug 1999 — The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages. • http://www.securityfocus.com/bid/558 •

CVE-1999-0408
https://notcve.org/view.php?id=CVE-1999-0408
25 Feb 1999 — Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server. • http://www.securityfocus.com/bid/337 •