← Database

CVE-2004-1603

MEDIUM CVSS: 5.5 Published: 2004-10-18 Modified: 2026-06-16

Description

cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.

Affected Platforms

Cpanel Cpanel

Weakness Type

CWE-59

References