CVE-2004-1603

medium

Description

cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.

References

Advisories
More

https://exchange.xforce.ibmcloud.com/vulnerabilities/17780

https://exchange.xforce.ibmcloud.com/vulnerabilities/17779

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1597

http://www.securityfocus.com/bid/11455

http://www.securityfocus.com/bid/11449

http://secunia.com/advisories/12865

http://marc.info/?l=bugtraq&m=109811654104208&w=2

http://marc.info/?l=bugtraq&m=109811572123753&w=2

Details

Source: Mitre, NVD

Published: 2004-10-18

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N