New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

0 Replies 4 Views
·
Participants
Thread Starter #0
cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there, run code as the root user.

cPanel published the advisory on September 8 and says every supported version of cPanel and WHM is affected.

Okumaya devam et...

You must be logged in to reply.

0 quotes selected