Vulnerability Details CVE-2004-1604
cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.8%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2004-1604
-
cpe:2.3:a:cpanel:cpanel:9.9.1_r3