cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/11449 | Exploit Patch Vendor Advisory |
http://www.securityfocus.com/bid/11455 | Exploit Patch Vendor Advisory |
http://secunia.com/advisories/12865 | Exploit Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=109811654104208&w=2 | |
http://marc.info/?l=bugtraq&m=109811572123753&w=2 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/17780 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/17779 |
Configurations
Information
Published : 2004-10-17 21:00
Updated : 2017-07-10 18:31
NVD link : CVE-2004-1603
Mitre link : CVE-2004-1603
JSON object : View
CWE
Products Affected
cpanel
- cpanel