CVE-2017-18045

JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service (segfault) via an unspecified request.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-01-21

Last modified

2024-09-16

Affected products

• Directadmin (Directadmin)

References

• https://www.directadmin.com/features.php?id=2036