fkie_cve-2006-5014
Vulnerability from fkie_nvd
Published
2006-09-27 01:07
Modified
2024-11-21 00:17
Severity ?
Summary
Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin.
Impacted products
Vendor Product Version
cpanel cpanel 5.0
cpanel cpanel 5.3
cpanel cpanel 6.0
cpanel cpanel 6.2
cpanel cpanel 6.4
cpanel cpanel 6.4.1
cpanel cpanel 6.4.2
cpanel cpanel 6.4.2_stable_48
cpanel cpanel 7.0
cpanel cpanel 8.0
cpanel cpanel 9.0
cpanel cpanel 9.1
cpanel cpanel 9.1.0_r85
cpanel cpanel 9.4.1_r64
cpanel cpanel 9.9.1_r3
cpanel cpanel 10.2.0_r82
cpanel cpanel 10.6.0_r137
cpanel cpanel 10.8.1_113
cpanel cpanel 10.8.2_118



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5B33AE8-75A8-4454-A1A3-33F4034015FC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4394768-37BE-4FC5-A65A-28C0295A33B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC52A018-43E8-4D86-A84C-81064B6ACD74",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FC66D8D-01B8-4312-A311-ACAB43699071",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E892FB52-DB84-422F-ABB6-29AB95726138",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FC5C591-69F3-411F-A53A-72D17687CA2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "92D81000-1A7C-4465-9EE2-E651AED09F82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4B555B5-E66F-4E37-A5BC-E04CBDFA4F8B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "09258895-32E6-49AC-8C96-D2838A0C8E6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B4F9F98-08A2-430B-BC96-B30DCA165F07",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "32D546C9-674B-4683-9EC5-18156CE04B63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E915DEA-1BA9-429D-97D5-CA3D37C969B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:9.1.0_r85:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D9DDCBE-8A9C-44FC-8A24-47933CE057F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:9.4.1_r64:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EE8C284-5264-4AEB-B8F8-4A58B021A9BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:9.9.1_r3:*:*:*:*:*:*:*",
              "matchCriteriaId": "414CFCA8-87FC-436E-9C41-ACB316578E3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:10.2.0_r82:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA952D50-2FB6-4517-98D4-8D345056EF38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:10.6.0_r137:*:*:*:*:*:*:*",
              "matchCriteriaId": "543BFD7C-EF52-4B5D-981F-947FB328EE53",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:10.8.1_113:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4CD9052-093E-4B8D-8ABE-43CD6156CAD8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cpanel:cpanel:10.8.2_118:*:*:*:*:*:*:*",
              "matchCriteriaId": "5CC79360-2E49-420A-A3D0-1CF54CAE7CE4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en cPanel anterior a 10.9.0 12 Tree permite a usuarios remotos autenticados obtener privilegios mediante vectores no especificados en (1) mysqladmin y (2) hooksadmin."
    }
  ],
  "id": "CVE-2006-5014",
  "lastModified": "2024-11-21T00:17:30.977",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-09-27T01:07:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://changelog.cpanel.net/?build=\u0026showall=1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://forums.cpanel.net/showthread.php?t=58134"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/22072"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1016913"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/20163"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://changelog.cpanel.net/?build=\u0026showall=1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://forums.cpanel.net/showthread.php?t=58134"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/22072"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1016913"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/20163"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.