Design/Logic Flaw

2009-05-0520:30:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.9%

JSON

JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.

CPENameOperatorVersion
directadmineq1.16
directadmineq1.02
directadmineq1.17
directadmineq1.282
directadmineq1.235
directadmineq1.231
directadmineq1.05
directadmineq1.281
directadmineq1.255
directadmineq1.205

Name	Operator	Version
directadmin	eq	1.16
directadmin	eq	1.02
directadmin	eq	1.17
directadmin	eq	1.282
directadmin	eq	1.235
directadmin	eq	1.231
directadmin	eq	1.05
directadmin	eq	1.281
directadmin	eq	1.255
directadmin	eq	1.205

Rows per page:

1-10 of 1151

References

archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html

osvdb.org/54014

secunia.com/advisories/34861

www.directadmin.com/features.php?id=968