SUSE CVE-2004-0559

The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory...

CVE-2004-0559

CVE-2004-0559 affects Usermin maketemp.pl in versions 1.070 and 1.080, enabling a local user to overwrite arbitrary files at install time through a symlink attack on /tmp/.usermin. The connected documents confirm the affected script and install-time exploitation vector; no explicit remediation de...

CVE-2004-0588

The CVE-2004-0588 entry describes an XSS vulnerability in Usermin’s web mail module (version around 1.070) that allows remote attackers to inject arbitrary HTML/script via e-mail messages. Affected software is Usermin, with the issue arising from improper sanitization of email content, enabling s...