Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2003-1426

Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPT_FILENAME to reference a directory containing a malicious openwebmail-shared.pl executable.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.0%
CVSS Severity
CVSS v2 Score 3.3
Products affected by CVE-2003-1426
  • Cpanel » Cpanel » Version: 5.0
    cpe:2.3:a:cpanel:cpanel:5.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved