424 matches found
CVE-2006-4246
CVE-2006-4246 affects Usermin prior to 1.220 (20060629). The vulnerability arises from how chfn/save.cgi handles an empty shell parameter, which can let remote attackers read arbitrary files and can change the root shell instead of the target user’s shell. Public sources confirm upstream fixes in...
CVE-2006-4246
Usermin before 1.220 20060629 allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user...
CVE-2006-4246: Undefined Security Weakness
Usermin before 1.220 20060629 allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user...
[SECURITY] [DSA 1177-1] New usermin packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1177-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2006 http://www.debian.org/security/faq -...
DSA-1177-1 usermin
Bulletin has no description...
CVE-2006-4542
Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null "%00" character, which allows remote attackers to conduct cross-site scripting XSS, read CGI program source code, list directories, and possibly execute programs...
CVE-2006-4542
Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null "%00" character, which allows remote attackers to conduct cross-site scripting XSS, read CGI program source code, list directories, and possibly execute programs...
CVE-2006-4542
Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null "%00" character, which allows remote attackers to conduct cross-site scripting XSS, read CGI program source code, list directories, and possibly execute programs...
CVE-2006-4542
Vulnerability CVE-2006-4542 affects Webmin prior to 1.296 and Usermin prior to 1.226, where miniserv.pl fails to filter null (%00) characters in URLs. This can enable cross-site scripting, CGI source disclosure, directory listing, and potentially arbitrary code execution. The public advisories in...
CVE-2006-4542: Improper Neutralization of Input During Web Page Generation
Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null "%00" character, which allows remote attackers to conduct cross-site scripting XSS, read CGI program source code, list directories, and possibly execute programs...
[SA21690] Webmin / Usermin Cross-Site Scripting and Source Code Disclosure
TITLE: Webmin / Usermin Cross-Site Scripting and Source Code Disclosure SECUNIA ADVISORY ID: SA21690 VERIFY ADVISORY: http://secunia.com/advisories/21690/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: Webmin 1.x...
JVN#99776858 Multiple vulnerabilities in Webmin and Usermin
Impact A remote attacker could conduct the followings: Steal Webmin and Usermin's configuration information Execute an arbitrary script on the user's web browser Possibly conduct a session hijack attack if session information from a cookie is leaked Solution Products Affected Webmin 1.290 and...
GLSA-200608-11 : Webmin, Usermin: File Disclosure
The remote host is affected by the vulnerability described in GLSA-200608-11 Webmin, Usermin: File Disclosure A vulnerability in both Webmin and Usermin has been discovered by Kenny Chen, wherein simplifypath is called before the HTML is decoded. Impact : A non-authenticated user can read any fil...
Webmin, Usermin: File Disclosure
Background Webmin is a web-based interface for Unix-like systems. Usermin is a simplified version of Webmin designed for use by normal users rather than system administrators. Description A vulnerability in both Webmin and Usermin has been discovered by Kenny Chen, wherein simplifypath is called...
Webmin 1.290 Usermin 1.220 - Arbitrary File Disclosure (Perl)
Webmin 1.290 Usermin 1.220 - Arbitrary File Disclosure Perl !/usr/bin/perl Exploit for WEBMIN and USERMIN less than 1.29x ARBITARY REMOTE FILE DISCLOSURE WORKS FOR HTTP AND HTTPS NOW Thrusday 13th July 2006 Vulnerability Disclosure at securitydot.net Coded by UmZ! umz32.dll at gmail.com Make sure...
Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
!/usr/bin/perl Exploit for WEBMIN and USERMIN less than 1.29x ARBITARY REMOTE FILE DISCLOSURE WORKS FOR HTTP AND HTTPS NOW Thrusday 13th July 2006 Vulnerability Disclosure at securitydot.net Coded by UmZ! umz32.dll at gmail.com Make sure you have LWP before using this exploit. USE IT AT YOUR OWN...
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Expl (perl)
Exploit for multiple platform in category remote exploits ========================================================================= Webmin new; if @ARGV \n"; print"TARGETS are\n "; print"0 - HTTP \n"; print" 1 - HTTPS\n"; print"Define full path with file name \n"; print"Example: ./webmin.pl...
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit (perl)
No description provided by source. !/usr/bin/perl Exploit for WEBMIN and USERMIN less than 1.29x ARBITARY REMOTE FILE DISCLOSURE WORKS FOR HTTP AND HTTPS NOW Thrusday 13th July 2006 Vulnerability Disclosure at securitydot.net Coded by UmZ! [email protected] Make sure you have LWP before using...
webmin.php.txt
securitydot.net - 2006-07-09...
Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Exploit
Exploit for multiple platform in category remote exploits ================================================================== Webmin 1.290 / Usermin 1.220 Arbitrary File Disclosure Exploit ================================================================== ?php / Name : Webmin / Usermin Arbitrary...