CVE-2017-18403: Medium severity cpanel vulnerability
Published Aug 2, 2019
·Updated
cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives (SEC-337).
Affected Software
4 affected components
Cpanel Cpanel>=61.9999.55<62.0.35
Cpanel Cpanel>=63.9999.74<64.0.42
Cpanel Cpanel>=65.9999.38<66.0.34
Cpanel Cpanel>=67.9999.64<68.0.15
Event History
Aug 2, 2019
CVE Published
via MITRE·01:12 PM
Data Sourced
via MITRE·01:12 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18403?
CVE-2017-18403 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2017-18403?
To fix CVE-2017-18403, upgrade your cPanel to version 68.0.15 or later.
3
Which versions of cPanel are affected by CVE-2017-18403?
CVE-2017-18403 affects cPanel versions prior to 68.0.15, specifically those between versions 61.9999.55 and 68.0.15.
4
What type of vulnerability is CVE-2017-18403?
CVE-2017-18403 is a remote code execution vulnerability linked to Mailman archives.
5
Who is impacted by CVE-2017-18403?
Users of affected cPanel versions are vulnerable to exploitation of CVE-2017-18403.