1 results (0.002 seconds)

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

08 Jun 2004 — The modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31 and earlier without mod_phpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as (1) proftpdvhosts or (2) addalink.cgi, a different vulnerability than CVE-2004-0490. El programa modificado suexec de cPanel, cuando se configura para mod_php y compila para Apache 1.3.31 y anteriores sin mod_phpsuexec, permite a usuarios locales ejecutar... • http://bugzilla.cpanel.net/show_bug.cgi?id=668 •