CVE-2003-1426
Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPT_FILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPT_FILENAME to reference a directory containing a malicious openwebmail-shared.pl executable.
Scoring
- CVSS base score
- 0
- EPSS probability
- 0.07%
- Published
- 2007-10-20
- Last modified
- 2026-03-16
Affected products
- n/a n/a