cPanel 11.40.1.13/11.42.1.15/11.43.0.11 Check/Repair a Perl Script race condition

Summaryinfo

A vulnerability has been found in cPanel 11.40.1.13/11.42.1.15/11.43.0.11 and classified as problematic. This affects an unknown function of the component Check/Repair a Perl Script. The manipulation leads to race condition. There is no available exploit. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in cPanel 11.40.1.13/11.42.1.15/11.43.0.11 (Hosting Control Software). It has been rated as problematic. This issue affects an unknown part of the component Check/Repair a Perl Script. The manipulation with an unknown input leads to a race condition vulnerability. Using CWE to declare the problem leads to CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. Impacted is confidentiality, and integrity.

The weakness was presented 05/26/2014 with cPanel as TSR-2014-2004 / Case 96541 as confirmed advisory (Website). The advisory is shared at cpanel.net. An attack has to be approached locally. A simple authentication is necessary for exploitation. Neither technical details nor an exploit are publicly available. The advisory points out:

The Check and Repair Perl Script functionality of WHM was vulnerable to a Time-of-check/Time-of-use attack. The UID this functionality would execute under was determined by a simple stat of the target file, followed by the execution of the script using “perl -c”. A local attacker could leverage this flaw to execute arbitrary code as root when this interface was used on a script under the attacker’s control.

Upgrading to version 11.40.1.14, 11.42.1.16 or 11.43.0.12 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

See VDB-13380, VDB-13379, VDB-13378 and VDB-13377 for similar entries. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Hosting Control Software

Name

• cPanel

Version

• 11.40.1.13
• 11.42.1.15
• 11.43.0.11

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion