CVE Vulnerabilities

CVE-2017-18477

Published: Aug 05, 2019 | Modified: Aug 12, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206).

Affected Software

Name Vendor Start Version End Version
Cpanel Cpanel 11.54.0.0 (including) 11.54.0.36 (excluding)
Cpanel Cpanel 55.9999.61 (including) 56.0.43 (excluding)
Cpanel Cpanel 57.9999.48 (including) 58.0.43 (excluding)
Cpanel Cpanel 59.9999.58 (including) 60.0.35 (excluding)
Cpanel Cpanel 61.9999.55 (including) 62.0.4 (excluding)

References