ByteOS Network

NVD Vulnerability Details :

CVE-2016-10858

Analyzed

Source-cve@mitre.org

Published At-01 Aug, 2019 | 15:15

Updated At-09 Aug, 2019 | 19:13

cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64).

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

>>cpanel>>Versions from 11.48.0.5(inclusive) to 11.48.4.8(exclusive)

>>cpanel>>Versions from 11.50.0.4(inclusive) to 11.50.3.1(exclusive)

>>cpanel>>Versions from 11.51.9999.98(inclusive) to 11.52.0.23(exclusive)

>>cpanel>>Versions from 11.52.1.0(inclusive) to 11.52.1.1(exclusive)

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

Hyperlink	Source	Resource
https://documentation.cpanel.net/display/CL/54+Change+Log	cve@mitre.org	Product Release Notes
https://forums.cpanel.net/threads/cpanel-tsr-2015-0006-full-disclosure.510181/	nvd@nist.gov	Vendor Advisory