WHMXtra Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	62847
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Sep 11 2013 12:00AM
Updated:	Sep 11 2013 12:00AM
Credit:	Rack911
Vulnerable:	WHMXtra WHMXtra G2 3.5
Not Vulnerable:	WHMXtra WHMXtra G2 3.7

WHMXtra Multiple Local Privilege Escalation Vulnerabilities

WHMXtra is prone to multiple local privilege-escalation vulnerabilities.

Local attackers can exploit these issues to execute arbitrary commands and perform certain unauthorized action with root privileges.

WHMXtra 3.5 is vulnerable; other versions may also be affected.

WHMXtra Multiple Local Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

WHMXtra Multiple Local Privilege Escalation Vulnerabilities

References:

• Change Log for WHMXtra Ultimate Pro (whmxtra)
  
• WHMXtra (Reseller UI) �?? Arbitrary Command Execution Vulnerabilities (R911-0066) (Rack911)
  
• WHMXtra (Reseller UI) �?? Local Race Condition Vulnerabilities (R911-0067) (Rack911)
  
• WHMXtra Homepage (WHMXtra)