CVE-2011-4733 Misconfiguration in n/a

Critical 10.0 Published 16 Dec 2011 Updated 7 Aug 2024

Incorrect Content-Type headers in Plesk Panel may allow remote attackers to exploit interpretation conflicts, potentially affecting clients.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2011-4733?

CVE-2011-4733 is a critical vulnerability in n/a, published on 16 Dec 2011. It can be exploited over the network.

Official description

The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/admin-home/disable-featured-applications-promo and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.

Which versions are affected by CVE-2011-4733?

It affects 1 product.

Products include Parallels Parallels Plesk Panel.

How do I fix CVE-2011-4733?

No fix has been published for CVE-2011-4733 yet. Limit exposure of the affected software until one is available.

Is CVE-2011-4733 being exploited?

There is no known exploitation of CVE-2011-4733 in the wild and no public exploit code.

Sources

Also known as GHSA-f5qp-xxrg-39r7.