1378 matches found
Updated webmin packages fix CVE-2015-1990
Updated webmin package fixes security vulnerability: A malicious website could create links or Javascript referencing the xmlrpc.cgi script, triggered when a user logged into Webmin visits the attacking site CVE-2015-1990...
MGASA-2015-0344 Updated webmin packages fix CVE-2015-1990
Updated webmin package fixes security vulnerability: A malicious website could create links or Javascript referencing the xmlrpc.cgi script, triggered when a user logged into Webmin visits the attacking site CVE-2015-1990...
Default credentials
GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...
CVE-2011-5322
GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...
CVE-2011-5322
GE Healthcare Centricity PACS-IW (Centricity PACS-IW) is vulnerable via default/hard-coded credentials documented for CVE-2011-5322 in Centricity Analytics Server 1.1, notably in the Webmin interface where several accounts use known passwords (e.g., V0yag3r, G3car3s, geservice). Exploitation coul...
Webmin Directory Traversal Vulnerability (CNVD-2015-01161)
Webmin is a Unix system administration Web interface that allows you to set up user accounts, Apache, DNS, DNS, file sharing and more from any browser. A directory traversal vulnerability in Webmin 1.720 allows local users to read arbitrary files via an unspecified file symlink attack...
CVE-2015-1377
The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file...
Design/Logic Flaw
The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file...
CVE-2015-1377
The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file...
CVE-2015-1377
Webmin Read Mail Module Information Disclosure (CVE-2015-1377): Webmin 1.720 is vulnerable to a local symlink attack that permits local users to read arbitrary files via the Read Mail module. The issue is confirmed in multiple security feeds (NVD entry for CVE-2015-1377; Nessus/OPENVAS plugins re...
Updated webmin packages fix security vulnerabilities
Updated webmin package fixes security vulnerability: The webmin package has been updated to version 1.730 to fix possible security issues that could be caused by malicious symlinks when reading mail. The updated version also has various bug fixes, translation updates, and functionality...
MGASA-2015-0007 Updated webmin packages fix security vulnerabilities
Updated webmin package fixes security vulnerability: The webmin package has been updated to version 1.730 to fix possible security issues that could be caused by malicious symlinks when reading mail. The updated version also has various bug fixes, translation updates, and functionality...
Webmin < 1.690 Multiple XSS
According to its self-reported version, the Webmin install hosted on the remote host is prior to version 1.690. It is, therefore, affected by multiple cross-site scripting vulnerabilities : - The application is affected by multiple unspecified cross-site scripting vulnerabilities. CVE-2014-3885 -...
Details Disclosed on Patched Webmin Vulnerability
The University of Texas information security office yesterday disclosed the details on a critical vulnerability in Webmin that was patched in May, days after it was reported. The bug in the UNIX remote management tool provided remote root access to a host server. Authenticated users would then be...
CVE-2014-3885
Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...
CVE-2014-3886
Cross-site scripting XSS vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...
Cross site scripting
Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...
Cross site scripting
Cross-site scripting XSS vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...
CVE-2014-3885
Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...
CVE-2014-3885
CVE-2014-3885 is an XSS vulnerability in Webmin prior to 1.690. It affects authenticated users who can inject arbitrary web script or HTML via unspecified vectors. The issue is tied to Webmin versions