CVE-2009-1526
DirectAdmin < 1.33.4 - Unauthenticated Arbitrary File Write via Symlink Attack on Backup Temporary File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-1526. PoCs published by anonymous.
AI-analyzed exploit summary This exploit demonstrates a symbolic link attack against DirectAdmin versions prior to 1.33.4, allowing an attacker with local access to overwrite arbitrary files by manipulating temporary file creation. The PoC shows how a symbolic link can be created to redirect a database dump to an arbitrary file, potentially leading to privilege escalation.
Description
JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.
Exploits (1)
This exploit demonstrates a symbolic link attack against DirectAdmin versions prior to 1.33.4, allowing an attacker with local access to overwrite arbitrary files by manipulating temporary file creation. The PoC shows how a symbolic link can be created to redirect a database dump to an arbitrary file, potentially leading to privilege escalation.