CVE-2008-2478

** DISPUTED ** scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users with reseller privileges to execute arbitrary code via shell metacharacters in the Email address field (aka Email text box). NOTE: the vendor disputes this, stating "I'm unable to reproduce such an issue on multiple servers running different versions of cPanel."

CVSS v2.0 8.5 HIGH

8.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability : 6.8 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/29277	Exploit
http://www.securitytracker.com/id?1020042
https://exchange.xforce.ibmcloud.com/vulnerabilities/42529
http://www.securityfocus.com/archive/1/492259/100/0/threaded
http://www.securityfocus.com/archive/1/492223/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cpanel:cpanel::current::::::*
	cpe:2.3:a:cpanel:cpanel::stable::::::*

Information

Published : 2008-05-28 08:32

Updated : 2018-10-11 13:41

NVD link : CVE-2008-2478

Mitre link : CVE-2008-2478

JSON object : View

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

Advertisement

Products Affected

cpanel

cpanel

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/29277", "name": "29277", "tags": ["Exploit"], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id?1020042", "name": "1020042", "tags": [], "refsource": "SECTRACK"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42529", "name": "cpanel-wwwact-privilege-escalation(42529)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/492259/100/0/threaded", "name": "20080519 Re: Cpanel all version >> root access with a reseller account.", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://www.securityfocus.com/archive/1/492223/100/0/threaded", "name": "20080518 Cpanel all version >> root access with a reseller account.", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "** DISPUTED ** scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users with reseller privileges to execute arbitrary code via shell metacharacters in the Email address field (aka Email text box). NOTE: the vendor disputes this, stating \"I'm unable to reproduce such an issue on multiple servers running different versions of cPanel.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-94"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2008-2478", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 8.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2008-05-28T15:32Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:cpanel:cpanel:*:current:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "11.23.1"}, {"cpe23Uri": "cpe:2.3:a:cpanel:cpanel:*:stable:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "11.8.6"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-11T20:41Z"}