CVE-2011-4744 Other in n/a

Critical 10.0 Published 16 Dec 2011 Updated 7 Aug 2024

Incorrect Content-Type headers in Plesk Control Panel may allow remote attackers to exploit interpretation conflicts, though impact is unspecified.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2011-4744?

CVE-2011-4744 is a critical vulnerability in n/a, published on 16 Dec 2011. It can be exploited over the network.

Official description

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/admin-home/featured-applications/ and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.

Which versions are affected by CVE-2011-4744?

It affects 1 product.

Products include Parallels Parallels Plesk Panel.

How do I fix CVE-2011-4744?

No fix has been published for CVE-2011-4744 yet. Limit exposure of the affected software until one is available.

Is CVE-2011-4744 being exploited?

There is no known exploitation of CVE-2011-4744 in the wild and no public exploit code.

Sources

Also known as GHSA-cfxf-hxrc-xf66.