CVE-2007-3367: High severity Cpanel Cpanel vulnerability

Q: What is the severity of CVE-2007-3367?

CVE-2007-3367 is classified as a moderate severity vulnerability due to its ability to expose sensitive information.

Q: How do I fix CVE-2007-3367?

To fix CVE-2007-3367, upgrade to cPanel version 11.4.19-R14378 or later.

Q: What software is affected by CVE-2007-3367?

CVE-2007-3367 affects cPanel versions before 10.9.1 and 11.x before 11.4.19-R14378.

Q: Can CVE-2007-3367 be exploited remotely?

Yes, CVE-2007-3367 can be exploited remotely by attackers to obtain sensitive information.

Q: What type of information can be revealed by CVE-2007-3367?

CVE-2007-3367 can reveal the software installation path through error messages.

Published Jun 22, 2007

Updated

Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtain sensitive information via a direct request, which reveals the path in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

2 affected components

Cpanel Cpanel<=11.4.19

Cpanel Cpanel<=10.9.0_build_10300

Remediation

Patch Available

http://secunia.com/advisories/25722

Event History

Jun 22, 2007

CVE Published

06:30 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3367?

CVE-2007-3367 is classified as a moderate severity vulnerability due to its ability to expose sensitive information.

How do I fix CVE-2007-3367?