JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Directadmin | Jbmc-software | * | 1.333 (including) |
| Directadmin | Jbmc-software | 0.95 (including) | 0.95 (including) |
| Directadmin | Jbmc-software | 1 (including) | 1 (including) |
| Directadmin | Jbmc-software | 1.1 (including) | 1.1 (including) |
| Directadmin | Jbmc-software | 1.01 (including) | 1.01 (including) |
| Directadmin | Jbmc-software | 1.02 (including) | 1.02 (including) |
| Directadmin | Jbmc-software | 1.2 (including) | 1.2 (including) |
| Directadmin | Jbmc-software | 1.3 (including) | 1.3 (including) |
| Directadmin | Jbmc-software | 1.03 (including) | 1.03 (including) |
| Directadmin | Jbmc-software | 1.04 (including) | 1.04 (including) |
| Directadmin | Jbmc-software | 1.05 (including) | 1.05 (including) |
| Directadmin | Jbmc-software | 1.06 (including) | 1.06 (including) |
| Directadmin | Jbmc-software | 1.07 (including) | 1.07 (including) |
| Directadmin | Jbmc-software | 1.08 (including) | 1.08 (including) |
| Directadmin | Jbmc-software | 1.09 (including) | 1.09 (including) |
| Directadmin | Jbmc-software | 1.11 (including) | 1.11 (including) |
| Directadmin | Jbmc-software | 1.12 (including) | 1.12 (including) |
| Directadmin | Jbmc-software | 1.13 (including) | 1.13 (including) |
| Directadmin | Jbmc-software | 1.14 (including) | 1.14 (including) |
| Directadmin | Jbmc-software | 1.15 (including) | 1.15 (including) |
| Directadmin | Jbmc-software | 1.16 (including) | 1.16 (including) |
| Directadmin | Jbmc-software | 1.17 (including) | 1.17 (including) |
| Directadmin | Jbmc-software | 1.18 (including) | 1.18 (including) |
| Directadmin | Jbmc-software | 1.19 (including) | 1.19 (including) |
| Directadmin | Jbmc-software | 1.21 (including) | 1.21 (including) |
| Directadmin | Jbmc-software | 1.22 (including) | 1.22 (including) |
| Directadmin | Jbmc-software | 1.23 (including) | 1.23 (including) |
| Directadmin | Jbmc-software | 1.24 (including) | 1.24 (including) |
| Directadmin | Jbmc-software | 1.25 (including) | 1.25 (including) |
| Directadmin | Jbmc-software | 1.26 (including) | 1.26 (including) |
| Directadmin | Jbmc-software | 1.27 (including) | 1.27 (including) |
| Directadmin | Jbmc-software | 1.28 (including) | 1.28 (including) |
| Directadmin | Jbmc-software | 1.29 (including) | 1.29 (including) |
| Directadmin | Jbmc-software | 1.31 (including) | 1.31 (including) |
| Directadmin | Jbmc-software | 1.32 (including) | 1.32 (including) |
| Directadmin | Jbmc-software | 1.33 (including) | 1.33 (including) |
| Directadmin | Jbmc-software | 1.081 (including) | 1.081 (including) |
| Directadmin | Jbmc-software | 1.111 (including) | 1.111 (including) |
| Directadmin | Jbmc-software | 1.121 (including) | 1.121 (including) |
| Directadmin | Jbmc-software | 1.151 (including) | 1.151 (including) |
| Directadmin | Jbmc-software | 1.152 (including) | 1.152 (including) |
| Directadmin | Jbmc-software | 1.161 (including) | 1.161 (including) |
| Directadmin | Jbmc-software | 1.171 (including) | 1.171 (including) |
| Directadmin | Jbmc-software | 1.172 (including) | 1.172 (including) |
| Directadmin | Jbmc-software | 1.173 (including) | 1.173 (including) |
| Directadmin | Jbmc-software | 1.174 (including) | 1.174 (including) |
| Directadmin | Jbmc-software | 1.181 (including) | 1.181 (including) |
| Directadmin | Jbmc-software | 1.192 (including) | 1.192 (including) |
| Directadmin | Jbmc-software | 1.193 (including) | 1.193 (including) |
| Directadmin | Jbmc-software | 1.195 (including) | 1.195 (including) |
| Directadmin | Jbmc-software | 1.196 (including) | 1.196 (including) |
| Directadmin | Jbmc-software | 1.201 (including) | 1.201 (including) |
| Directadmin | Jbmc-software | 1.202 (including) | 1.202 (including) |
| Directadmin | Jbmc-software | 1.203 (including) | 1.203 (including) |
| Directadmin | Jbmc-software | 1.204 (including) | 1.204 (including) |
| Directadmin | Jbmc-software | 1.205 (including) | 1.205 (including) |
| Directadmin | Jbmc-software | 1.206 (including) | 1.206 (including) |
| Directadmin | Jbmc-software | 1.207 (including) | 1.207 (including) |
| Directadmin | Jbmc-software | 1.211 (including) | 1.211 (including) |
| Directadmin | Jbmc-software | 1.212 (including) | 1.212 (including) |
| Directadmin | Jbmc-software | 1.213 (including) | 1.213 (including) |
| Directadmin | Jbmc-software | 1.221 (including) | 1.221 (including) |
| Directadmin | Jbmc-software | 1.222 (including) | 1.222 (including) |
| Directadmin | Jbmc-software | 1.223 (including) | 1.223 (including) |
| Directadmin | Jbmc-software | 1.224 (including) | 1.224 (including) |
| Directadmin | Jbmc-software | 1.225 (including) | 1.225 (including) |
| Directadmin | Jbmc-software | 1.226 (including) | 1.226 (including) |
| Directadmin | Jbmc-software | 1.231 (including) | 1.231 (including) |
| Directadmin | Jbmc-software | 1.232 (including) | 1.232 (including) |
| Directadmin | Jbmc-software | 1.233 (including) | 1.233 (including) |
| Directadmin | Jbmc-software | 1.234 (including) | 1.234 (including) |
| Directadmin | Jbmc-software | 1.235 (including) | 1.235 (including) |
| Directadmin | Jbmc-software | 1.241 (including) | 1.241 (including) |
| Directadmin | Jbmc-software | 1.242 (including) | 1.242 (including) |
| Directadmin | Jbmc-software | 1.243 (including) | 1.243 (including) |
| Directadmin | Jbmc-software | 1.244 (including) | 1.244 (including) |
| Directadmin | Jbmc-software | 1.251 (including) | 1.251 (including) |
| Directadmin | Jbmc-software | 1.252 (including) | 1.252 (including) |
| Directadmin | Jbmc-software | 1.253 (including) | 1.253 (including) |
| Directadmin | Jbmc-software | 1.254 (including) | 1.254 (including) |
| Directadmin | Jbmc-software | 1.255 (including) | 1.255 (including) |
| Directadmin | Jbmc-software | 1.261 (including) | 1.261 (including) |
| Directadmin | Jbmc-software | 1.262 (including) | 1.262 (including) |
| Directadmin | Jbmc-software | 1.263 (including) | 1.263 (including) |
| Directadmin | Jbmc-software | 1.264 (including) | 1.264 (including) |
| Directadmin | Jbmc-software | 1.265 (including) | 1.265 (including) |
| Directadmin | Jbmc-software | 1.266 (including) | 1.266 (including) |
| Directadmin | Jbmc-software | 1.273 (including) | 1.273 (including) |
| Directadmin | Jbmc-software | 1.274 (including) | 1.274 (including) |
| Directadmin | Jbmc-software | 1.275 (including) | 1.275 (including) |
| Directadmin | Jbmc-software | 1.281 (including) | 1.281 (including) |
| Directadmin | Jbmc-software | 1.282 (including) | 1.282 (including) |
| Directadmin | Jbmc-software | 1.285 (including) | 1.285 (including) |
| Directadmin | Jbmc-software | 1.286 (including) | 1.286 (including) |
| Directadmin | Jbmc-software | 1.291 (including) | 1.291 (including) |
| Directadmin | Jbmc-software | 1.292 (including) | 1.292 (including) |
| Directadmin | Jbmc-software | 1.293 (including) | 1.293 (including) |
| Directadmin | Jbmc-software | 1.294 (including) | 1.294 (including) |
| Directadmin | Jbmc-software | 1.295 (including) | 1.295 (including) |
| Directadmin | Jbmc-software | 1.296 (including) | 1.296 (including) |
| Directadmin | Jbmc-software | 1.297 (including) | 1.297 (including) |
| Directadmin | Jbmc-software | 1.301 (including) | 1.301 (including) |
| Directadmin | Jbmc-software | 1.302 (including) | 1.302 (including) |
| Directadmin | Jbmc-software | 1.311 (including) | 1.311 (including) |
| Directadmin | Jbmc-software | 1.312 (including) | 1.312 (including) |
| Directadmin | Jbmc-software | 1.313 (including) | 1.313 (including) |
| Directadmin | Jbmc-software | 1.314 (including) | 1.314 (including) |
| Directadmin | Jbmc-software | 1.315 (including) | 1.315 (including) |
| Directadmin | Jbmc-software | 1.321 (including) | 1.321 (including) |
| Directadmin | Jbmc-software | 1.322 (including) | 1.322 (including) |
| Directadmin | Jbmc-software | 1.323 (including) | 1.323 (including) |
| Directadmin | Jbmc-software | 1.331 (including) | 1.331 (including) |
| Directadmin | Jbmc-software | 1.332 (including) | 1.332 (including) |
| Directadmin | Jbmc-software | 1.1741 (including) | 1.1741 (including) |
| Directadmin | Jbmc-software | 1.1941 (including) | 1.1941 (including) |