CVEvulnerability

CVE-2004-1769

10.0 HIGH Published 2004-03-11 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-03-11
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.

Affected configurations

• cpanel cpanel 5.0 • cpanel cpanel 5.3 • cpanel cpanel 6.0 • cpanel cpanel 6.2 • cpanel cpanel 6.4 • cpanel cpanel 6.4.1 • cpanel cpanel 6.4.2 • cpanel cpanel 6.4.2 stable 48 • cpanel cpanel 7.0 • cpanel cpanel 8.0 • cpanel cpanel 9.0 • cpanel cpanel 9.1

References

http://marc.info/?l=bugtraq&m=107904890724201&w=2 marc.info
http://secunia.com/advisories/11111 Vendor Advisory
http://www.kb.cert.org/vuls/id/831534 Third Party Advisory, US Government Resource
http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0 Vendor Advisory
http://www.securityfocus.com/bid/9848 Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15443 exchange.xforce.ibmcloud.com
http://marc.info/?l=bugtraq&m=107904890724201&w=2 marc.info
http://secunia.com/advisories/11111 Vendor Advisory
http://www.kb.cert.org/vuls/id/831534 Third Party Advisory, US Government Resource
http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0 Vendor Advisory
http://www.securityfocus.com/bid/9848 Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15443 exchange.xforce.ibmcloud.com