Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-3042
HistorySep 22, 2005 - 12:00 a.m.

CVE-2005-3042

2005-09-2200:00:00
ubuntu.com
ubuntu.com
12

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

90.2%

miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when “full PAM
conversations” is enabled, allows remote attackers to bypass authentication
by spoofing session IDs via certain metacharacters (line feed or carriage
return).

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

90.2%

Related for UB:CVE-2005-3042