CVE-2009-1526

JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.55% chance of exploitation in the next 30 days, 44th percentile

Published

2009-05-05

Updated

2024-09-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32947

References

• CVE Record
• NVD entry

Related

• CVE-2009-1523
• CVE-2009-1527
• CVE-2009-1519
• CVE-2009-1534
• CVE-2009-1517
• CVE-2009-1535