Vulnerability in Cpanel

CVE-2004-1604

cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled.

EPSS: 0.011 (60.9th percentile) — read the EPSS interpretation.

Affected products

  • Cpanel — versions 9.9.1_r3
  • N/a — versions n/a

References