CVE-2004-1769: Critical severity Cpanel Cpanel vulnerability
Published Mar 11, 2004
·Updated
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
Affected Software
12 affected components
Cpanel Cpanel=9.0
Cpanel Cpanel=6.4
Cpanel Cpanel=5.3
Cpanel Cpanel=5.0
Cpanel Cpanel=6.0
Cpanel Cpanel=6.4.1
Cpanel Cpanel=6.4.2_stable_48
Cpanel Cpanel=6.4.2
Cpanel Cpanel=8.0
Cpanel Cpanel=9.1
Cpanel Cpanel=6.2
Cpanel Cpanel=7.0
Event History
Mar 11, 2004
CVE Published
05:00 AM
Mar 10, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1769?
CVE-2004-1769 is considered a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2004-1769?
To fix CVE-2004-1769, update your cPanel installation to a version later than 9.1.0 build 34.
3
What versions of cPanel are affected by CVE-2004-1769?
CVE-2004-1769 affects cPanel versions 9.1.0 build 34 and earlier, along with versions from 8.x and earlier.
4
What type of vulnerability is CVE-2004-1769?
CVE-2004-1769 is classified as a remote code execution vulnerability that allows attackers to exploit the password reset feature.
5
Can CVE-2004-1769 be exploited remotely?
Yes, CVE-2004-1769 can be exploited remotely by attackers through the password reset functionality.