Cloud Linux CageFS 'postmodifyacct' Script Privilege Escalation Vulnerability

Bugtraq ID:	64624
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 24 2013 12:00AM
Updated:	Dec 24 2013 12:00AM
Credit:	Rack911
Vulnerable:	Cloud Linux CageFS 5.2-12
Not Vulnerable:	Cloud Linux CageFS 5.2-15

Cloud Linux CageFS 'postmodifyacct' Script Privilege Escalation Vulnerability

Cloud Linux CageFS is prone to a remote privilege-escalation vulnerability because it fails to adequately validate user-supplied input data.

Remote attackers can exploit this issue to gain elevated privileges and perform unauthorized actions.

Cloud Linux CageFS 5.2-12 is vulnerable; other versions may also be affected.

Cloud Linux CageFS 'postmodifyacct' Script Privilege Escalation Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cloud Linux CageFS 'postmodifyacct' Script Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information

Cloud Linux CageFS 'postmodifyacct' Script Privilege Escalation Vulnerability

References:

• Cloud Linux Home Page (Cloud Linux)
  
• CloudLinux �?? CageFS (postmodifyacct) Input Validation Failure (R911-0110) (Rack911)
  
• CageFS 5.2-15 - Security Update for cPanel servers (Cloud Linux)