cPanel Bug Lets Remote Authenticated Users Gain Root Access
|
|
SecurityTracker Alert ID: 1016913
|
|
SecurityTracker URL: http://securitytracker.com/id?1016913
|
|
CVE Reference: CVE-2006-5014
(Links to External Site)
|
Updated: Jun 3 2008
|
Original Entry Date: Sep 25 2006
|
Impact: Root access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Description: A vulnerability was reported in cPanel. A remote authenticated user can gain root privileges on the target system.
The affected files are:
/usr/local/cpanel/bin/mysqladmin
/usr/local/cpanel/bin/hooksadmin
|
Impact: A remote authenticated user can gain root privileges on the target system.
|
Solution: The vendor has issued a patch.
The vendor's advisory is available at:
http://forums.cpanel.net/showthread.php?t=58134
|
Vendor URL: www.cpanel.net/ (Links to External Site)
|
Cause: Not specified
|
Underlying OS: Linux (Any), UNIX (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Sun, 24 Sep 2006 23:40:09 -0400
Subject: cPanel vulnerability
|
http://forums.cpanel.net/showthread.php?t=58134
|
|
