CVE

Id
8957  
CVE No.
CVE-2004-0529  
Status
Candidate  
Description
The modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31 and earlier without mod_phpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as (1) proftpdvhosts or (2) addalink.cgi, a different vulnerability than CVE-2004-0490.  
Phase
Assigned (20040603)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
57566 8957 CVE-2004-0529 BUGTRAQ:20040605 cPanel mod_php suEXEC Taint Vulnerability  View
57567 8957 CVE-2004-0529 URL:http://marc.info/?l=bugtraq&m=108663003608211&w=2  View
57568 8957 CVE-2004-0529 CONFIRM:http://bugzilla.cpanel.net/show_bug.cgi?id=668  View
57569 8957 CVE-2004-0529 BID:10478  View
57570 8957 CVE-2004-0529 URL:http://www.securityfocus.com/bid/10478  View
57571 8957 CVE-2004-0529 SECTRACK:1010411  View
57572 8957 CVE-2004-0529 URL:http://securitytracker.com/id?1010411  View
57573 8957 CVE-2004-0529 SECUNIA:11798  View
57574 8957 CVE-2004-0529 URL:http://secunia.com/advisories/11798  View
57575 8957 CVE-2004-0529 XF:cpanel-suexec-command-execute(16347)  View

Related JVN