fkie_cve-2006-5014
Vulnerability from fkie_nvd
Published
2006-09-27 01:07
Modified
2024-11-21 00:17
Severity ?
Summary
Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
cpanel | cpanel | 5.0 | |
cpanel | cpanel | 5.3 | |
cpanel | cpanel | 6.0 | |
cpanel | cpanel | 6.2 | |
cpanel | cpanel | 6.4 | |
cpanel | cpanel | 6.4.1 | |
cpanel | cpanel | 6.4.2 | |
cpanel | cpanel | 6.4.2_stable_48 | |
cpanel | cpanel | 7.0 | |
cpanel | cpanel | 8.0 | |
cpanel | cpanel | 9.0 | |
cpanel | cpanel | 9.1 | |
cpanel | cpanel | 9.1.0_r85 | |
cpanel | cpanel | 9.4.1_r64 | |
cpanel | cpanel | 9.9.1_r3 | |
cpanel | cpanel | 10.2.0_r82 | |
cpanel | cpanel | 10.6.0_r137 | |
cpanel | cpanel | 10.8.1_113 | |
cpanel | cpanel | 10.8.2_118 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "E5B33AE8-75A8-4454-A1A3-33F4034015FC", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*", "matchCriteriaId": "E4394768-37BE-4FC5-A65A-28C0295A33B6", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "DC52A018-43E8-4D86-A84C-81064B6ACD74", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*", "matchCriteriaId": "2FC66D8D-01B8-4312-A311-ACAB43699071", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*", "matchCriteriaId": "E892FB52-DB84-422F-ABB6-29AB95726138", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "1FC5C591-69F3-411F-A53A-72D17687CA2E", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "92D81000-1A7C-4465-9EE2-E651AED09F82", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*", "matchCriteriaId": "E4B555B5-E66F-4E37-A5BC-E04CBDFA4F8B", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "09258895-32E6-49AC-8C96-D2838A0C8E6F", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "3B4F9F98-08A2-430B-BC96-B30DCA165F07", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "32D546C9-674B-4683-9EC5-18156CE04B63", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*", "matchCriteriaId": "1E915DEA-1BA9-429D-97D5-CA3D37C969B5", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:9.1.0_r85:*:*:*:*:*:*:*", "matchCriteriaId": "4D9DDCBE-8A9C-44FC-8A24-47933CE057F2", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:9.4.1_r64:*:*:*:*:*:*:*", "matchCriteriaId": "9EE8C284-5264-4AEB-B8F8-4A58B021A9BA", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:9.9.1_r3:*:*:*:*:*:*:*", "matchCriteriaId": "414CFCA8-87FC-436E-9C41-ACB316578E3C", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:10.2.0_r82:*:*:*:*:*:*:*", "matchCriteriaId": "BA952D50-2FB6-4517-98D4-8D345056EF38", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:10.6.0_r137:*:*:*:*:*:*:*", "matchCriteriaId": "543BFD7C-EF52-4B5D-981F-947FB328EE53", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:10.8.1_113:*:*:*:*:*:*:*", "matchCriteriaId": "E4CD9052-093E-4B8D-8ABE-43CD6156CAD8", "vulnerable": true }, { "criteria": "cpe:2.3:a:cpanel:cpanel:10.8.2_118:*:*:*:*:*:*:*", "matchCriteriaId": "5CC79360-2E49-420A-A3D0-1CF54CAE7CE4", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1) mysqladmin and (2) hooksadmin." }, { "lang": "es", "value": "Vulnerabilidad no especificada en cPanel anterior a 10.9.0 12 Tree permite a usuarios remotos autenticados obtener privilegios mediante vectores no especificados en (1) mysqladmin y (2) hooksadmin." } ], "id": "CVE-2006-5014", "lastModified": "2024-11-21T00:17:30.977", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 8.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ] }, "published": "2006-09-27T01:07:00.000", "references": [ { "source": "cve@mitre.org", "url": "http://changelog.cpanel.net/?build=\u0026showall=1" }, { "source": "cve@mitre.org", "url": "http://forums.cpanel.net/showthread.php?t=58134" }, { "source": "cve@mitre.org", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://secunia.com/advisories/22072" }, { "source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016913" }, { "source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/20163" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://changelog.cpanel.net/?build=\u0026showall=1" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://forums.cpanel.net/showthread.php?t=58134" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://secunia.com/advisories/22072" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016913" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/20163" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.