Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-1468
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.014
Percentile
86.4%
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.
Affected configurations
Node
userminuserminMatch1.000
ORuserminuserminMatch1.010
ORuserminuserminMatch1.020
ORuserminuserminMatch1.030
ORuserminuserminMatch1.040
ORuserminuserminMatch1.051
ORuserminuserminMatch1.060
ORuserminuserminMatch1.070
ORuserminuserminMatch1.080
ORwebminwebminMatch1.0.00
ORwebminwebminMatch1.0.20
ORwebminwebminMatch1.0.50
ORwebminwebminMatch1.0.60
ORwebminwebminMatch1.0.70
ORwebminwebminMatch1.0.80
ORwebminwebminMatch1.0.90
ORwebminwebminMatch1.1.00
ORwebminwebminMatch1.1.10
ORwebminwebminMatch1.1.21
ORwebminwebminMatch1.1.30
ORwebminwebminMatch1.1.40
ORwebminwebminMatch1.1.50
| Vendor | Product | Version | CPE |
|---|---|---|---|
| usermin | usermin | 1.000 | cpe:2.3:a:usermin:usermin:1.000:*:*:*:*:*:*:* |
| usermin | usermin | 1.010 | cpe:2.3:a:usermin:usermin:1.010:*:*:*:*:*:*:* |
| usermin | usermin | 1.020 | cpe:2.3:a:usermin:usermin:1.020:*:*:*:*:*:*:* |
| usermin | usermin | 1.030 | cpe:2.3:a:usermin:usermin:1.030:*:*:*:*:*:*:* |
| usermin | usermin | 1.040 | cpe:2.3:a:usermin:usermin:1.040:*:*:*:*:*:*:* |
| usermin | usermin | 1.051 | cpe:2.3:a:usermin:usermin:1.051:*:*:*:*:*:*:* |
| usermin | usermin | 1.060 | cpe:2.3:a:usermin:usermin:1.060:*:*:*:*:*:*:* |
| usermin | usermin | 1.070 | cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:* |
| usermin | usermin | 1.080 | cpe:2.3:a:usermin:usermin:1.080:*:*:*:*:*:*:* |
| webmin | webmin | 1.0.00 | cpe:2.3:a:webmin:webmin:1.0.00:*:*:*:*:*:*:* |
Related
nessus
nessus
Webmin 1.x < 1.160 Remote Code Execution
2018-03-22 00:00:00
Debian DSA-544-1 : webmin - insecure temporary directory
2004-09-29 00:00:00
GLSA-200409-15 : Webmin, Usermin: Multiple vulnerabilities in Usermin
2004-09-12 00:00:00
cvelist
cvelist
CVE-2004-1468
2005-02-13 05:00:00
cve
cve
CVE-2004-1468
2005-02-13 05:00:00
gentoo
gentoo
Webmin, Usermin: Multiple vulnerabilities in Usermin
2004-09-12 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200409-15 (Usermin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200409-15 (Usermin)
2008-09-24 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.014
Percentile
86.4%
Related for NVD:CVE-2004-1468