{"id":"CVE-2004-1603","aliases":["EUVD-2004-1597","GHSA-8cvx-3rg5-x9j3"],"status":"published","title":"cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files...","description":"cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01638,"percentile":0.76498,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-59"],"published":"2004-10-18T04:00:00Z","modified":"2026-06-16T22:08:01Z","products":[{"vendor":"cpanel","product":"cpanel"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17780","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq\u0026m=109811572123753\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17779","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq\u0026m=109811654104208\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List"]},{"url":"http://www.securityfocus.com/bid/11455","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12865","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11449","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1603"},{"url":"https://github.com/advisories/GHSA-8cvx-3rg5-x9j3"}],"sources":{"cve":[{"id":"CVE-2004-1603","description":"cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.","status":"published","published":"2005-02-20T05:00:00Z","modified":"2024-08-08T01:00:36.711Z","updated_at":"2026-11-02T14:34:54.063504Z"}],"euvd":[{"id":"EUVD-2004-1597","description":"cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.","status":"published","published":"2005-02-20T05:00:00Z","modified":"2024-08-08T01:00:36Z","updated_at":"2026-11-03T01:15:14.211358Z"}],"ghsa":[{"id":"GHSA-8cvx-3rg5-x9j3","title":"cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files...","description":"cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.","status":"published","published":"2022-04-29T02:59:53Z","modified":"2024-01-26T18:30:31Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:55:29.55339Z"}],"nvd":[{"id":"CVE-2004-1603","description":"cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.","status":"published","published":"2004-10-18T04:00:00Z","modified":"2026-06-16T22:08:01.697Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:00:51.000028Z"}]}}