Type: Content Manipulation
Vulnerable Version: All versions prior to the fixed builds below.
Fixed Version: 184.108.40.206, 220.127.116.11, 18.104.22.168 & 22.214.171.124.
cPanel is an easy-to-use control panel that gives web hosts and the website owners they serve, the ability to quickly and easily manage their servers and websites. Web Host Manager (WHM) is a part of the cPanel software, often used by resellers and system administrators.
There is a flaw within WHM that allows an attacker to access a file used by the locale function that would allow them to modify certain content and possibly elevate privileges.
Proof of Concept:
Due to the nature of this security flaw, we will not be posting a Proof of Concept until a much later date.
We have deemed this vulnerability to be rated as HIGH due to the fact that root owned content can be modified.
This vulnerability was tested against cPanel (WHM) v126.96.36.199 and v188.8.131.52 and is believed to exist in all prior versions.
This vulnerability was patched in cPanel v184.108.40.206, v220.127.116.11, v18.104.22.168 & v22.214.171.124.
Vendor Contact Timeline:
2013-05-16: Vendor contacted via email.
2013-05-17: Vendor confirms vulnerability.
2013-06-05: Vendor issues updates to all builds.
2013-06-11: Rack911 issues security advisory.