cPanel 'wwwact' Remote Privilege Escalation Vulnerability
BID:29277
Info
cPanel 'wwwact' Remote Privilege Escalation Vulnerability
| Bugtraq ID: | 29277 |
| Class: | Access Validation Error |
| CVE: |
CVE-2008-2478 |
| Remote: | Yes |
| Local: | No |
| Published: | May 19 2008 12:00AM |
| Updated: | May 07 2015 05:28PM |
| Credit: | Ali Jasbi |
| Vulnerable: |
cPanel cPanel 11.21 -BETA cPanel cPanel 11.18.4 cPanel cPanel 11.18.3 cPanel cPanel 11.4.19 cPanel cPanel 11.0 cPanel cPanel 10.9.1 cPanel cPanel 10.9 build 134 cPanel cPanel 10.9 build 125 cPanel cPanel 10.9 cPanel cPanel 10.8.2 118 cPanel cPanel 10.8.1 113 cPanel cPanel 10.8.1 (build 84) cPanel cPanel 10.6 .0-R137 cPanel cPanel 10.2 .0-R82 cPanel cPanel 11.18.3-R21703 cPanel cPanel 11 beta cPanel cPanel 11 cPanel cPanel 10 cPanel cPanel 0 |
| Not Vulnerable: | |
Discussion
cPanel 'wwwact' Remote Privilege Escalation Vulnerability
cPanel is prone to a remote privilege-escalation vulnerability because of an unspecified error.
Successfully exploiting this issue allows remote attackers to gain administrative privileges to the affected application and execute malicious PHP code in the context of the webserver process. This may facilitate a compromise of the webserver and the underlying system; other attacks are also possible.
cPanel is prone to a remote privilege-escalation vulnerability because of an unspecified error.
Successfully exploiting this issue allows remote attackers to gain administrative privileges to the affected application and execute malicious PHP code in the context of the webserver process. This may facilitate a compromise of the webserver and the underlying system; other attacks are also possible.
Exploit / POC
cPanel 'wwwact' Remote Privilege Escalation Vulnerability
Attackers can use a browser to exploit this issue.
The following proof of concept demonstrates this issue:
Attackers can use a browser to exploit this issue.
The following proof of concept demonstrates this issue:
Solution / Fix
cPanel 'wwwact' Remote Privilege Escalation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
cPanel 'wwwact' Remote Privilege Escalation Vulnerability
References:
References: