Debian Security Advisory DSA 526-1 (webmin)

The remote host is missing an update to webmin announced via advisory DSA 526-1. OpenVAS Vulnerability Test $Id: deb5261.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 526-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 544-1 (webmin)

The remote host is missing an update to webmin announced via advisory DSA 544-1. OpenVAS Vulnerability Test $Id: deb5441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 544-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-544-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Webmin File Disclosure

A vulnerability has been reported in Webmin and Usermin, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an unspecified error within the handling of an URL. This can be exploited to read the contents of any files on the...

Webmin远程目录遍历漏洞

BUGTRAQ ID: 18613 Webmin是一款基于WEB的Unix和Linux操作系统系统管理接口。 Webmin对用户请求的处理上存在目录遍历漏洞，远程攻击者可能利用此漏洞遍历服务器目录非授权访问文件。 Webmin没有正确的过滤反斜线（“\”）。在Windows平台上，这允许攻击者访问公共目录和文件以外的内容。在Webmin的默认配置中，远程攻击者可以利用目录遍历攻击下载任意文件。 Webmin Webmin http://www.webmin.com/webmin/...

CVE-2002-2360

The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remoteforeignrequire and remoteforeigncall requests...

CVE-2002-2360

CVE-2002-2360 affects Webmin 0.21–0.99. The RPC module, when installed without root/admin privileges, allows remote attackers to read and write arbitrary files and to execute arbitrary commands via remote_foreign_require and remote_foreign_call requests. The vulnerability is associated with remot...

JVN#61208749 Webmin OS command injection vulnerability

Webmin is a web-based system management tool. Webmin for Windows contains a vulnerability that allows an unauthorized Webmin user to execute OS commands by entering a specially crafted URL. Impact An attacker could execute arbitrary OS commands with Local System privileges on a computer where...

Code injection

Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary commands via a crafted URL...

CVE-2007-5066

Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary commands via a crafted URL...

CVE-2007-5066

CVE-2007-5066 affects Webmin on Windows prior to 1.370. It is described as an OS command injection vulnerability that allows remote authenticated users to execute arbitrary commands via a crafted URL, potentially with Local System privileges. The vulnerability is fixed in Webmin 1.370. No active ...

CVE-2007-5066

Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary commands via a crafted URL...

GLSA-200707-05 : Webmin, Usermin: XSS vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200707-05 Webmin, Usermin: XSS vulnerabilities The pamlogin.cgi file does not properly sanitize user input before sending it back as output to the user. Impact : An unauthenticated attacker could entice a user to browse a speciall...

Webmin pam_login.cgis远程跨站脚本执行漏洞

BUGTRAQ ID: 24381 CVECAN ID: CVE-2007-3156 Webmin是一款基于WEB的Unix和Linux操作系统管理界面。 Webmin的pamlogin.cgi文件中存在多个跨站脚本漏洞，如果用户受骗访问了恶意网页的话，远程攻击者就可以通过cid、message或question参数向用户浏览器会话注入并执行任意脚本。 Webmin Webmin 1.340 Webmin Usermin 1.270 Webmin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Webmin, Usermin: Cross-site scripting vulnerabilities

Background Webmin is a web-based administrative interface for Unix-like systems. Usermin is a simplified version of Webmin designed for use by normal users rather than system administrators. Description The pamlogin.cgi file does not properly sanitize user input before sending it back as output t...

Mandrake Linux Security Advisory : webmin (MDKSA-2007:135)

Multiple cross-site scripting XSS vulnerabilities were discovered in pamlogin.cgi in webmin prior to version 1.350, which could allow a remote attacker to inject arbitrary web script or HTML. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security,...

[ MDKSA-2007:135 ] - Updated webmin packages fix XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:135 http://www.mandriva.com/security/ Package : webmin Date : June 23, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: Multiple cross-site scripting XSS vulnerabilities were discovered in...

Webmin Pam_Login.CGI多个未明跨站脚本漏洞

Webmin是一款基于WEB的用户管理程序。 Webmin包含的pamlogin.cgi存在跨站脚本问题，远程攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 Webmin Webmin 1.340 升级程序： Webmin Webmin 1.340 Webmin webmin-1.350.tar.gz http://prdownloads.sourceforge.net/webadmin/webmin-1.350.tar.gz...

FreeBSD : webmin -- XSS vulnerability (12b7286f-16a2-11dc-b803-0016179b2dd5)

Secunia reports : Input passed to unspecified parameters in pamlogin.cgi is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. %NASLMINLEVEL 70300 C Tenable Network...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pamlogin.cgi in Webmin before 1.350 and Usermin before 1.280 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 message, or 3 question parameter. NOTE: some of these details are obtained from third party information...