CVE-2017-18413: High severity cpanel vulnerability
Published Aug 2, 2019
·Updated
In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears (SEC-299).
Affected Software
6 affected components
Cpanel Cpanel>=55.9999.61<56.0.52
Cpanel Cpanel>=59.9999.58<60.0.48
Cpanel Cpanel>=61.9999.55<62.0.30
Cpanel Cpanel>=64.0.0<64.0.40
Cpanel Cpanel>=65.9999.38<66.0.23
Cpanel Cpanel>=67.9999.64<67.9999.103
Event History
Aug 2, 2019
CVE Published
via MITRE·01:51 PM
Data Sourced
via MITRE·01:51 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18413?
CVE-2017-18413 has a moderate severity rating due to the potential impact on root's home directory.
2
How do I fix CVE-2017-18413?
To fix CVE-2017-18413, upgrade cPanel to version 67.9999.104 or later.
3
What versions of cPanel are affected by CVE-2017-18413?
CVE-2017-18413 affects cPanel versions prior to 67.9999.104, specifically those below version 67.9999.103.
4
What is the impact of CVE-2017-18413 on the backup system?
The impact of CVE-2017-18413 is that the backup system may overwrite root's home directory when a mount disappears.
5
Is there a workaround for CVE-2017-18413?
There is no official workaround for CVE-2017-18413; updating to the latest version is strongly advised.