1377 matches found
CVE-2002-2201
The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name...
CVE-2002-2201
CVE-2002-2201 affects Webmin ≤ 0.990, where the Printer Administration module allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the printer name. This is a remote, unauthenticated issue with high impact (arbitrary code execution) as described in multiple s...
Webmin / Usermin Detection (HTTP)
HTTP based detection of Webmin / Usermin. SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10757"...
GLSA-200509-17 : Webmin, Usermin: Remote code execution through PAM authentication
The remote host is affected by the vulnerability described in GLSA-200509-17 Webmin, Usermin: Remote code execution through PAM authentication Keigo Yamazaki discovered that the miniserv.pl webserver, used in both Webmin and Usermin, does not properly validate authentication credentials before...
[SNS Advisory No.83] Webmin/Usermin PAM Authentication Bypass Vulnerability
------------------------------------------------------------------ SNS Advisory No.83 Webmin/Usermin PAM Authentication Bypass Vulnerability Problem first discovered on: Sun, 04 Sep 2005 Published on: Tue, 20 Sep 2005 ------------------------------------------------------------------ Severity...
Webmin, Usermin: Remote code execution through PAM authentication
Background Webmin and Usermin are web-based system administration consoles. Webmin allows an administrator to easily configure servers and other features. Usermin allows users to configure their own accounts, execute commands, and read e-mails. Description Keigo Yamazaki discovered that the...
perl, webmin, usermin -- perl format string integer wrap vulnerability
The Perl Development page reports: Dyad Security recently released a security advisory explaining how in certain cases, a carefully crafted format string passed to sprintf can cause a buffer overflow. This buffer overflow can then be used by an attacker to execute code on the machine. This was...
CVE-2005-3042
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return...
CVE-2005-3042
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return...
CVE-2005-3042
Webmin/miniserv.pl (and Usermin) vulnerability CVE-2005-3042 allows remote authentication bypass when PAM conversations are enabled. Specifically, miniserv.pl in Webmin < 1.230 and Usermin
CVE-2005-3042
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return...
Webmin / Usermin PAM Authentication Bypass Vulnerability
Secunia Advisory: SA16858 Release Date: 2005-09-20 Critical: Moderately critical Impact: Security Bypass Where: From remote Solution Status: Vendor Patch Software: Usermin 1.x Webmin 1.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Descriptio...
JVN#40940493 Webmin and Usermin authentication bypass vulnerability
Impact A remote attacker could bypass Webmin and Usermin's authentication, and execute an arbitrary command with root privileges. Solution Products Affected Webmin Version 1.200 - 1.220 Usermin Version 1.130 - 1.160...
CVE-2005-2731
Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. dot dot in the wfedownload parameter to index.fpl...
CVE-2005-2731
Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. dot dot in the wfedownload parameter to index.fpl...
CVE-2005-2731
CVE-2005-2731: Directory traversal in Astaro Security Linux 6.0 when Webmin is used. Remote authenticated Webmin users could read arbitrary files via a .. sequence in the wfe_download parameter to index.fpl. NVD lists a LOW base score (2.1). No remediation details are provided in the supplied doc...
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...
Astaro security Linux default configuration multiple vulnerabilities
It's possible to access 127.0.0.1 with CONNECT proxy, Webmin directory traversal, crossite scripting...
CVE-2001-1530
CVE-2001-1530 affects Webmin 0.80 and 0.88. The vulnerability is in run.cgi, which creates temporary files with world-writable permissions. This allows local users to execute arbitrary commands. The connected Red Hat/Nessus entries corroborate the effect, describing the same root cause and impact...