Vulnerability in Gentoo Webmin

CVE-2005-0427

The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted passw…

EPSS: 0.022 (80.6th percentile) — read the EPSS interpretation.

Affected products

Gentoo Webmin — versions 1.140, 1.150, 1.160
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)