CVEvulnerability
CVE-2004-1603
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-10-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-59
Description
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.
Affected configurations
• cpanel cpanel 9.4.1
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- http://marc.info/?l=bugtraq&m=109811572123753&w=2 Mailing List
- http://marc.info/?l=bugtraq&m=109811654104208&w=2 Mailing List
- http://secunia.com/advisories/12865 Broken Link, Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11449 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/11455 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17779 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17780 Third Party Advisory, VDB Entry
- http://marc.info/?l=bugtraq&m=109811572123753&w=2 Mailing List
- http://marc.info/?l=bugtraq&m=109811654104208&w=2 Mailing List
- http://secunia.com/advisories/12865 Broken Link, Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/11449 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/11455 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17779 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17780 Third Party Advisory, VDB Entry