Description (CNA)
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17780
- http://marc.info/?l=bugtraq&m=109811572123753&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17779
- http://marc.info/?l=bugtraq&m=109811654104208&w=2
- http://www.securityfocus.com/bid/11455
- http://secunia.com/advisories/12865
- http://www.securityfocus.com/bid/11449
ADP enrichment
No English description supplied.
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17780
- http://marc.info/?l=bugtraq&m=109811572123753&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17779
- http://marc.info/?l=bugtraq&m=109811654104208&w=2
- http://www.securityfocus.com/bid/11455
- http://secunia.com/advisories/12865
- http://www.securityfocus.com/bid/11449