[cobalt-security] Colbalt-RAQ-v4-Bugs&Vulnerabilities

[Barbara <thebizworkers@xxxxxxxxx>]

So I'm trying to figure out if our RaQ3/4 machines are
indeed vulnerable to these posted exploits or not?
I've read both here and on other lists, that "yes"
they are vulnerable. Some have even offered temp fix
solutions; 

for example -
http://online.securityfocus.com/archive/1/259015

and -
http://list.cobalt.com/pipermail/cobalt-security/2002-March/004639.html

While others are saying the machines aren't
vulnerable. Are they vulnerable to one, but not all
three, or none at all? I'm confused. Are we or aren't
we vulnerable and to which one or all? I'd much rather
go in and disable the scripts if indeed they are
vulnerable, then leave them sitting around waiting for
someone to try and maybe (maybe not) exploit one. I've
gone ahead and disabled them just to be safe, but
would like to know for sure.

Thanks
Barbara


__________________________________________________
Do You Yahoo!?
Yahoo! Sports - sign up for Fantasy Baseball
http://sports.yahoo.com