Lucene search
+L

2 matches found

Tenable Nessus
Tenable Nessus
•added 2018/03/22 12:00 a.m.•88 views

Webmin < 1.230 miniserv.pl Authentication Bypass

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.230. It is, therefore, affected by a potential authentication bypass via spoofed session IDs. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108548; scriptversion"1.5";...

7.5CVSS5.5AI score0.04127EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/22 12:00 a.m.•4 views

CVE-2005-3042: Undefined Security Weakness

miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return...

7.5CVSS5.8AI score0.04127EPSS
SaveExploits0References1
Rows per page
Query Builder