cPanel 'cpanellogd' Multiple Remote Privilege Escalation Vulnerabilities

Bugtraq ID:	61018
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 08 2013 12:00AM
Updated:	Jul 08 2013 12:00AM
Credit:	Reported by the vendor
Vulnerable:	cPanel cPanel 11.38.1.3 cPanel cPanel 11.38.0.18 cPanel cPanel 11.36.1.8 cPanel cPanel 11.34.1.16 cPanel cPanel 11.32.6.7
Not Vulnerable:	cPanel cPanel 11.38.1.4 cPanel cPanel 11.38.0.19 cPanel cPanel 11.36.1.9 cPanel cPanel 11.34.1.17 cPanel cPanel 11.32.6.8

cPanel 'cpanellogd' Multiple Remote Privilege Escalation Vulnerabilities

cPanel is prone to multiple remote privilege-escalation vulnerabilities in the 'cpanellogd' component.

Attackers can exploit these issues to take ownership of arbitrary files or directories located on the same file system, without sufficient privileges. Successful exploits may aid in further attacks.

cPanel versions prior to 11.38.1.4, 11.38.0.19, 11.36.1.9, 11.34.1.17, and 11.32.6.8

cPanel 'cpanellogd' Multiple Remote Privilege Escalation Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

cPanel 'cpanellogd' Multiple Remote Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

cPanel 'cpanellogd' Multiple Remote Privilege Escalation Vulnerabilities

References:

• cPanel Homepage (cPanel)