CVE-2004-1603

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-10-18 · updated 2026-06-16
Weakness: CWE-59

Description

cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.

Affected products

WebPros cPanel: 9.4.1

References

http://marc.info/?l=bugtraq&m=109811572123753&w=2
http://marc.info/?l=bugtraq&m=109811654104208&w=2
http://secunia.com/advisories/12865
http://www.securityfocus.com/bid/11449
http://www.securityfocus.com/bid/11455
https://exchange.xforce.ibmcloud.com/vulnerabilities/17779
https://exchange.xforce.ibmcloud.com/vulnerabilities/17780
http://marc.info/?l=bugtraq&m=109811572123753&w=2
http://marc.info/?l=bugtraq&m=109811654104208&w=2
http://secunia.com/advisories/12865
http://www.securityfocus.com/bid/11449
http://www.securityfocus.com/bid/11455

Get alerted when CVE-2004-1603 or the next vulnerability affects your stack