CVE-2004-1603: cPanel

Medium severity, CVSS 5.5. EPSS: 1.6% chance of exploitation in the next 30 days.

cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.

Affected products

• cPanel cPanel: version 9.4.1 only

Published 2004-10-18. Last modified 2026-06-16.