CVE-2004-1603 | BDVDB-2026-8407 Detail
Description#
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17780
- http://marc.info/?l=bugtraq&m=109811572123753&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17779
- http://marc.info/?l=bugtraq&m=109811654104208&w=2
- http://www.securityfocus.com/bid/11455
- http://secunia.com/advisories/12865
- http://www.securityfocus.com/bid/11449
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.