CVE-2004-1604

cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-09-30

Last modified

2024-08-08

Affected products

• Cpanel (Cpanel)

References

• http://marc.info/?l=bugtraq&m=109811762230326&w=2