CVE-2006-3274

Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \ backslash characters in the URL to certain directories under the web root, such as the image directory...

CVE-2006-3274

CVE-2006-3274 : Webmin

[SA20777] Webmin Directory Traversal Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

[SNS Advisory No.88] Webmin Directory Traversal Vulnerability

---------------------------------------------------------------------- SNS Advisory No.88 Webmin Directory Traversal Vulnerability Problem first discovered on: Sun, 04 Jun 2006 Published on: Fri, 23 Jun 2006 ---------------------------------------------------------------------- Severity Level:...

JVN#67974490 Webmin directory traversal vulnerability

Impact A remote attacker could view files on the computer without authentication. Private information could be leaked as a result. Solution Products Affected Webmin 1.280 and earlier Usermin 1.210 and earlier As of June 30, 2006, patched versions of the module addressing this vulnerability for al...

FreeBSD : perl, webmin, usermin -- perl format string integer wrap vulnerability (bb33981a-7ac6-11da-bf72-00123f589060)

The Perl Development page reports : Dyad Security recently released a security advisory explaining how in certain cases, a carefully crafted format string passed to sprintf can cause a buffer overflow. This buffer overflow can then be used by an attacker to execute code on the machine. This was...

Mandrake Linux Security Advisory : webmin (MDKSA-2005:223)

Jack Louis discovered a format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled. This can allow remote attackers to cause a denial of service crash or memory consumption and possibly execute arbitrary code via format...

Mandrake Linux Security Advisory : webmin (MDKSA-2005:176)

Miniserv.pl in Webmin 1.220, when 'full PAM conversations' is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return. The updated packages have been patched to correct this issues. %NASLMINLEVEL 70300 C Tenable...

Webmin 'miniserv.pl' 'username' Parameter Format String

The version of Webmin installed on the remote host contains a format string flaw when logging failed authentication attempts. Using specially crafted values for the 'username' parameter of the 'sessionlogin.cgi', an attacker could exploit the flaw to crash the affected server or to potentially...

GLSA-200512-02 : Webmin, Usermin: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200512-02 Webmin, Usermin: Format string vulnerability Jack Louis discovered that the Webmin and Usermin 'miniserv.pl' web server component is vulnerable to a Perl format string vulnerability. Login with the supplied username is...

Webmin, Usermin: Format string vulnerability

Background Webmin is a web-based interface for Unix-like systems. Usermin is a simplified version of Webmin designed for use by normal users rather than system administrators. Description Jack Louis discovered that the Webmin and Usermin "miniserv.pl" web server component is vulnerable to a Perl...

CVE-2005-3912

Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, allows remote attackers to cause a denial of service crash or memory consumption and possibly execute arbitrary code via format string specifiers in the usernam...

Immunity Canvas: WEBMIN

Name| webmin ---|--- CVE| CVE-2005-3912 Exploit Pack| CANVAS Description| Webmin Remote Exploit Notes| CVE Name: CVE-2005-3912 VENDOR: Webmin.com OSVDB: Repeatability: References: http://www.dyadsecurity.com/webmin-0001.html - http://www.dyadsecurity.com/perl-0002.html CVE Url:...

CVE-2005-3912

CVE-2005-3912: Webmin/miniserv.pl format-string vulnerability (username in login form) can crash or exhaust resources and potentially allow remote code execution when syslog logging is enabled. Affected: Webmin < 1.250 and Usermin

[Full-disclosure] Webmin miniserv.pl format string vulnerability

SUMMARY. The webmin miniserv.pl' web server component is vulnerable to a new class of exploitable remote code perl format string vulnerabilities. During the login process it is possible to trigger this vulnerability via a crafted username parameter containing format string data. In the observed...

CVE-2002-2201

The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name...

CVE-2002-2201

CVE-2002-2201 affects Webmin ≤ 0.990, where the Printer Administration module allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the printer name. This is a remote, unauthenticated issue with high impact (arbitrary code execution) as described in multiple s...

Webmin / Usermin Detection (HTTP)

HTTP based detection of Webmin / Usermin. SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10757"...

GLSA-200509-17 : Webmin, Usermin: Remote code execution through PAM authentication

The remote host is affected by the vulnerability described in GLSA-200509-17 Webmin, Usermin: Remote code execution through PAM authentication Keigo Yamazaki discovered that the miniserv.pl webserver, used in both Webmin and Usermin, does not properly validate authentication credentials before...

[SNS Advisory No.83] Webmin/Usermin PAM Authentication Bypass Vulnerability

------------------------------------------------------------------ SNS Advisory No.83 Webmin/Usermin PAM Authentication Bypass Vulnerability Problem first discovered on: Sun, 04 Sep 2005 Published on: Tue, 20 Sep 2005 ------------------------------------------------------------------ Severity...