CVE-2011-0437 shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control (DTC) before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edssh_acco...
MediumCVSS 4.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control (DTC) before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edssh_account parameter in a deletesshaccount Delete action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | <= 0.32.8 | No fix listed |
| gplhost domain technologie control | = 0.24.6 | No fix listed |
| gplhost domain technologie control | = 0.25.1 | No fix listed |
| gplhost domain technologie control | = 0.25.2 | No fix listed |
| gplhost domain technologie control | = 0.25.3 | No fix listed |
| gplhost domain technologie control | = 0.26.7 | No fix listed |
| gplhost domain technologie control | = 0.26.8 | No fix listed |
| gplhost domain technologie control | = 0.26.9 | No fix listed |
| gplhost domain technologie control | = 0.27.3 | No fix listed |
| gplhost domain technologie control | = 0.28.2 | No fix listed |
| gplhost domain technologie control | = 0.28.3 | No fix listed |
| gplhost domain technologie control | = 0.28.4 | No fix listed |
| gplhost domain technologie control | = 0.28.6 | No fix listed |
| gplhost domain technologie control | = 0.28.9 | No fix listed |
| gplhost domain technologie control | = 0.28.10 | No fix listed |
| gplhost domain technologie control | = 0.29.1 | No fix listed |
| gplhost domain technologie control | = 0.29.6 | No fix listed |
| gplhost domain technologie control | = 0.29.8 | No fix listed |
| gplhost domain technologie control | = 0.29.10 | No fix listed |
| gplhost domain technologie control | = 0.29.14 | No fix listed |
| gplhost domain technologie control | = 0.29.15 | No fix listed |
| gplhost domain technologie control | = 0.29.16 | No fix listed |
| gplhost domain technologie control | = 0.29.17 | No fix listed |
| gplhost domain technologie control | = 0.30.6 | No fix listed |
| gplhost domain technologie control | = 0.30.8 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| gplhost domain technologie control | = 0.30.10 | No fix listed |
| gplhost domain technologie control | = 0.30.18 | No fix listed |
| gplhost domain technologie control | = 0.30.20 | No fix listed |
| gplhost domain technologie control | = 0.32.1 | No fix listed |
| gplhost domain technologie control | = 0.32.2 | No fix listed |
| gplhost domain technologie control | = 0.32.3 | No fix listed |
| gplhost domain technologie control | = 0.32.4 | No fix listed |
| gplhost domain technologie control | = 0.32.5 | No fix listed |
| gplhost domain technologie control | = 0.32.6 | No fix listed |
| gplhost domain technologie control | = 0.32.7 | No fix listed |
References
- git.gplhost.com
- git.gplhost.com
- packages.debian.org
- packages.debian.org
- 43523 third-party-advisory vendor-advisory
- DSA-2179 vendor-advisory
- [dtcannounce] 20110303 Fwd: [SECURITY] [DSA 2179-1] dtc security update mailing-list patch
- ADV-2011-0556 vdb-entry vendor-advisory
- dtc-ssh-sec-bypass(65897) vdb-entry