CVE-2016-10811

CVE-2016-10811 affects cPanel prior to 57.9999.54, where the script /scripts/unsuspendacct exposes TTYs (SEC-116). The public description confirms the vulnerability is tied to this script, with high impact in both confidentiality, integrity, and availability (CVSSv3 8.8). Red Hat and CNVD referen...

CVE-2016-10808

CVE-2016-10808 affects cPanel prior to 57.9999.54. The endpoints /scripts/addpop and /scripts/delpop expose TTYs (SEC-113), enabling potential attacker access with high impact on confidentiality, integrity, and availability (CVSSv3 base score 8.8). No remediation details are provided in the suppl...

CVE-2016-10812: Improper Input Validation

In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs SEC-117...

CVE-2016-10811: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs SEC-116...

CVE-2016-10820

cPanel before 55.9999.141 allows daemons to access their controlling TTYs SEC-31...

CVE-2016-10820

cPanel before 55.9999.141 allows daemons to access their controlling TTYs SEC-31...

CVE-2016-10820

CVE-2016-10820 affects cPanel before 55.9999.141, where daemons can access their controlling TTYs (SEC-31). The issue, described as an access control weakness, yields high impact on confidentiality, integrity, and availability (per CVSS). Actionable remediation: upgrade to 55.9999.141 or later; v...

Linux kernel contention condition denial of service vulnerability (CNVD-2016-01040)

The Linux kernel is an open source, free operating system kernel originally done by Linus Torvalds. A contention condition vulnerability exists in the 'ttyioctl' function in the drivers/tty/ttyio.c file in Linux kernel 4.4.1 and earlier versions. A local attacker can exploit this vulnerability to...