CVE-2017-17384: Critical severity ISPConfig ISPConfig vulnerability
Published Dec 7, 2017
·Updated
ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job.
Affected Software
56 affected components
ISPConfig ISPConfig=3.0.2
ISPConfig ISPConfig=3.0.2.1
ISPConfig ISPConfig=3.0.2.2
ISPConfig ISPConfig=3.0.2.2-b1
ISPConfig ISPConfig=3.0.3
ISPConfig ISPConfig=3.0.3-b1
ISPConfig ISPConfig=3.0.3-rc1
ISPConfig ISPConfig=3.0.3.1
ISPConfig ISPConfig=3.0.3.1-rc1
ISPConfig ISPConfig=3.0.3.1-rc2
ISPConfig ISPConfig=3.0.3.2
ISPConfig ISPConfig=3.0.3.2-rc1
ISPConfig ISPConfig=3.0.3.3
ISPConfig ISPConfig=3.0.3.3-rc1
ISPConfig ISPConfig=3.0.4
ISPConfig ISPConfig=3.0.4-b1
ISPConfig ISPConfig=3.0.4.1
ISPConfig ISPConfig=3.0.4.1-rc1
ISPConfig ISPConfig=3.0.4.1-rc2
ISPConfig ISPConfig=3.0.4.2
ISPConfig ISPConfig=3.0.4.3
ISPConfig ISPConfig=3.0.4.6
ISPConfig ISPConfig=3.0.4.6-rc1
ISPConfig ISPConfig=3.0.5
ISPConfig ISPConfig=3.0.5-alpha1
ISPConfig ISPConfig=3.0.5-b1
ISPConfig ISPConfig=3.0.5-rc1
ISPConfig ISPConfig=3.0.5-rc2
ISPConfig ISPConfig=3.0.5.1
ISPConfig ISPConfig=3.0.5.2
ISPConfig ISPConfig=3.0.5.3
ISPConfig ISPConfig=3.0.5.4
ISPConfig ISPConfig=3.0.5.4-b1
ISPConfig ISPConfig=3.0.5.4-p1
ISPConfig ISPConfig=3.0.5.4-p2
ISPConfig ISPConfig=3.0.5.4-p3
ISPConfig ISPConfig=3.0.5.4-p4
ISPConfig ISPConfig=3.0.5.4-p5
ISPConfig ISPConfig=3.0.5.4-p6
ISPConfig ISPConfig=3.0.5.4-p7
ISPConfig ISPConfig=3.0.5.4-p8
ISPConfig ISPConfig=3.0.5.4-p9
ISPConfig ISPConfig=3.0.5.4-rc1
ISPConfig ISPConfig=3.0.5.4-rc2
ISPConfig ISPConfig=3.1
ISPConfig ISPConfig=3.1.1
ISPConfig ISPConfig=3.1.1-p1
ISPConfig ISPConfig=3.1.2
ISPConfig ISPConfig=3.1.3
ISPConfig ISPConfig=3.1.4
ISPConfig ISPConfig=3.1.5
ISPConfig ISPConfig=3.1.6
ISPConfig ISPConfig=3.1.7
ISPConfig ISPConfig=3.1.7-p1
ISPConfig ISPConfig=3.1.8
ISPConfig ISPConfig=3.1.8-p1
Remediation
Event History
Dec 7, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17384?
CVE-2017-17384 is considered a high-severity vulnerability allowing remote authenticated users to gain root access.
2
How do I fix CVE-2017-17384?
To fix CVE-2017-17384, upgrade ISPConfig to version 3.1.9 or later.
3
What versions of ISPConfig are affected by CVE-2017-17384?
CVE-2017-17384 affects ISPConfig versions prior to 3.1.9.
4
Who can exploit CVE-2017-17384?
Remote authenticated users can exploit CVE-2017-17384 to gain unauthorized root access.
5
What type of attack is CVE-2017-17384 associated with?
CVE-2017-17384 is associated with the creation of a crafted cron job that facilitates privilege escalation.