DirectAdmin Symlink Attack Multiple Remote Privilege Escalation Vulnerabilities
BID:61017
Info
DirectAdmin Symlink Attack Multiple Remote Privilege Escalation Vulnerabilities
| Bugtraq ID: | 61017 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 08 2013 12:00AM |
| Updated: | Jul 08 2013 12:00AM |
| Credit: | Rack911 |
| Vulnerable: |
JBMC Software DirectAdmin 1.33.6 JBMC Software DirectAdmin 1.33.4 JBMC Software DirectAdmin 1.33.3 JBMC Software DirectAdmin 1.30.2 JBMC Software DirectAdmin 1.30.1 JBMC Software DirectAdmin 1.403 JBMC Software DirectAdmin 1.382 JBMC Software DirectAdmin 1.381 JBMC Software DirectAdmin 1.38 JBMC Software DirectAdmin 1.351 |
| Not Vulnerable: | |
Discussion
DirectAdmin Symlink Attack Multiple Remote Privilege Escalation Vulnerabilities
DirectAdmin is prone to multiple remote privilege-escalation vulnerabilities.
Remote attackers can exploit these issues to gain root privileges on the target system.
DirectAdmin is prone to multiple remote privilege-escalation vulnerabilities.
Remote attackers can exploit these issues to gain root privileges on the target system.
Exploit / POC
DirectAdmin Symlink Attack Multiple Remote Privilege Escalation Vulnerabilities
An attacker uses readily available commands to exploit these issues.
An attacker uses readily available commands to exploit these issues.
Solution / Fix
DirectAdmin Symlink Attack Multiple Remote Privilege Escalation Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
DirectAdmin Symlink Attack Multiple Remote Privilege Escalation Vulnerabilities
References:
References: