Vulnerability Details : CVE-2004-1769
Potential exploit
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
Vulnerability category: Execute code
Products affected by CVE-2004-1769
- cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-1769
26.11%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 97 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-1769
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2004-1769
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/15443
-
http://marc.info/?l=bugtraq&m=107904890724201&w=2
-
http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0
Vendor Advisory
-
http://www.securityfocus.com/bid/9848
Exploit;Vendor Advisory
-
http://www.kb.cert.org/vuls/id/831534
Third Party Advisory;US Government Resource
Jump to