9

CVE-2006-5014

Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cpanel ≫ Cpanel Version 5.0
Cpanel ≫ Cpanel Version 5.3
Cpanel ≫ Cpanel Version 6.0
Cpanel ≫ Cpanel Version 6.2
Cpanel ≫ Cpanel Version 6.4
Cpanel ≫ Cpanel Version 6.4.1
Cpanel ≫ Cpanel Version 6.4.2
Cpanel ≫ Cpanel Version 6.4.2_stable_48
Cpanel ≫ Cpanel Version 7.0
Cpanel ≫ Cpanel Version 8.0
Cpanel ≫ Cpanel Version 9.0
Cpanel ≫ Cpanel Version 9.1
Cpanel ≫ Cpanel Version 9.1.0_r85
Cpanel ≫ Cpanel Version 9.4.1_r64
Cpanel ≫ Cpanel Version 9.9.1_r3
Cpanel ≫ Cpanel Version 10.2.0_r82
Cpanel ≫ Cpanel Version 10.6.0_r137
Cpanel ≫ Cpanel Version 10.8.1_113
Cpanel ≫ Cpanel Version 10.8.2_118
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.87% 0.889
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CISA-ADP 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

http://changelog.cpanel.net/?build=&showall=1
http://forums.cpanel.net/showthread.php?t=58134
http://secunia.com/advisories/22072
Patch
Vendor Advisory
http://securitytracker.com/id?1016913
http://www.securityfocus.com/bid/20163