cPanel Bug Lets Remote Authenticated Users Gain Root Access

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1016913

SecurityTracker URL: http://securitytracker.com/id/1016913

CVE Reference: CVE-2006-5014 (Links to External Site)

Updated: Jun 3 2008

Original Entry Date: Sep 25 2006

Impact: Root access via network

Fix Available: Yes Vendor Confirmed: Yes

Description: A vulnerability was reported in cPanel. A remote authenticated user can gain root privileges on the target system.

The affected files are:

/usr/local/cpanel/bin/mysqladmin
/usr/local/cpanel/bin/hooksadmin

Impact: A remote authenticated user can gain root privileges on the target system.

Solution: The vendor has issued a patch.

The vendor's advisory is available at:

http://forums.cpanel.net/showthread.php?t=58134

Vendor URL: www.cpanel.net/ (Links to External Site)

Cause: Not specified

Underlying OS: Linux (Any), UNIX (Any)

Message History: None.

Date: Sun, 24 Sep 2006 23:40:09 -0400
Subject: cPanel vulnerability


http://forums.cpanel.net/showthread.php?t=58134