The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Is there a fix for Ali Jasbi's root exploit?

Discussion in 'General Discussion' started by BianchiDude, May 20, 2008.

  1. BianchiDude

    BianchiDude Well-Known Member
    PartnerNOC

    Joined:
    Jul 2, 2005
    Messages:
    619
    Likes Received:
    0
    Trophy Points:
    166
    Is there a fix for Ali Jasbi's root exploit?

    By : Ali Jasbi ( IHST security & hacking Research team) WwW.Hackerz.ir
    Vendor : Cpanel.net
    Version : ALL !!
    Risk : Very high
    What u can do with this bug is :
    u can have a access to all the server with reseller privilege (Th3 r00t)
    how it's work ?
    when u want to create an account in shell what will happen ?
    ./script/wwwact [domainname] [username] [password] [Email address] lab lab lab
    that u can run it with a web base program ! ( cpanel : doamin:2086)
     
    #1 BianchiDude, May 20, 2008
    Last edited by a moderator: May 20, 2008
  2. cPanelKenneth

    cPanelKenneth cPanel Development
    Staff Member

    Joined:
    Apr 7, 2006
    Messages:
    4,486
    Likes Received:
    29
    Trophy Points:
    308
    cPanel Access Level:
    Root Administrator
    His report is inaccurate and non-reproducible. In short: there is no exploit.
     
    #2 cPanelKenneth, May 21, 2008
(You must log in or sign up to post here.)
Loading...
Similar Threads - Jasbi's root exploit
  1. Jcats

    AutoSSL for proxy subdomains when root domain exists elsewhere

    Jcats, Jun 21, 2017 at 1:19 PM, in forum: Security
    Replies:
    3
    Views:
    46
    cPanelMichael
    Jun 22, 2017 at 10:55 AM
  2. iBotPeaches

    AutoSSL & different DocumentRoot

    iBotPeaches, Jun 21, 2017 at 6:14 AM, in forum: Security
    Replies:
    1
    Views:
    37
    cPanelMichael
    Jun 21, 2017 at 9:25 AM
  3. Morphus

    Updated Addon Domains Doc Root Issue

    Morphus, Jun 16, 2017, in forum: General Discussion
    Replies:
    17
    Views:
    119
    24x7server
    Jun 20, 2017 at 2:37 AM
  4. Jarod Thornton

    Apache config for sharing domain document root

    Jarod Thornton, Jun 15, 2017, in forum: Workarounds and Optimization
    Replies:
    5
    Views:
    74
    cPanelMichael
    Jun 20, 2017 at 2:24 PM
  5. Googolicous

    Access multiple user directories from 1 SSH user without root permissions

    Googolicous, Jun 2, 2017, in forum: CloudLinux
    Replies:
    1
    Views:
    76
    cPanelMichael
    Jun 2, 2017

Share This Page