CVE-2004-1604 Information

Description

cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory which is created when Front Page extensions are enabled.

Reference

http://marc.info/?l=bugtraq&m=109811762230326&w=2