DirectAdmin Hard Link Local Privilege Escalation Vulnerability
BID:47690
Info
DirectAdmin Hard Link Local Privilege Escalation Vulnerability
| Bugtraq ID: | 47690 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 03 2011 12:00AM |
| Updated: | May 03 2011 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
JBMC Software DirectAdmin 1.33.6 JBMC Software DirectAdmin 1.33.4 JBMC Software DirectAdmin 1.33.3 JBMC Software DirectAdmin 1.30.2 JBMC Software DirectAdmin 1.30.1 JBMC Software DirectAdmin 1.381 JBMC Software DirectAdmin 1.351 JBMC Software DirectAdmin 1.292 |
| Not Vulnerable: |
JBMC Software DirectAdmin 1.382 |
Discussion
DirectAdmin Hard Link Local Privilege Escalation Vulnerability
DirectAdmin is prone to a local privilege-escalation vulnerability.
Attackers can leverage this issue to gain escalated privileges. Successful exploits may compromise affected computers.
Versions prior to DirectAdmin 1.382 are vulnerable.
DirectAdmin is prone to a local privilege-escalation vulnerability.
Attackers can leverage this issue to gain escalated privileges. Successful exploits may compromise affected computers.
Versions prior to DirectAdmin 1.382 are vulnerable.
Exploit / POC
DirectAdmin Hard Link Local Privilege Escalation Vulnerability
To exploit this issue, attackers need local access and readily available tools.
To exploit this issue, attackers need local access and readily available tools.
Solution / Fix
DirectAdmin Hard Link Local Privilege Escalation Vulnerability
Solution:
The vendor has released updates. Please see the references for details.
Solution:
The vendor has released updates. Please see the references for details.
References
DirectAdmin Hard Link Local Privilege Escalation Vulnerability
References:
References:
- DirectAdmin Homepage (DirectAdmin)
- Extra security checking when creating backups (DirectAdmin)