Webmin
Page 2 of 2 — Webmin CVEs from a corpus of 118, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-1177 | | 2005-05-02 | Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact. | |
CVE-2004-1468 | | 2004-12-31 | The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message. | |
CVE-2004-0559 | | 2004-10-20 | The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin dir… | |
CVE-2004-0583 | | 2004-08-06 | The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct… | |
CVE-2004-0582 | | 2004-08-06 | Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module. | |
CVE-2003-0101 | | 2003-03-03 | miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in B… | |
CVE-2002-2360 | | 2002-12-31 | The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and e… | |
CVE-2002-2201 | | 2002-12-31 | The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer na… | |
CVE-2002-1947 | | 2002-12-31 | Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session. | |
CVE-2002-1673 | | 2002-12-31 | The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execu… | |
CVE-2002-1672 | | 2002-12-31 | Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's… | |
CVE-2002-0757 | | 2002-08-12 | (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via… | |
CVE-2002-0756 | | 2002-08-12 | Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error p… | |
CVE-2001-1530 | | 2001-12-31 | run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands. | |
CVE-2001-1196 | | 2001-12-17 | Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument. | |
CVE-2001-1074 | | 2001-05-28 | Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication inform… | |
CVE-2001-0222 | | 2001-03-26 | webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack. | |
CVE-1999-1074 | | 1999-12-31 | Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privilege… |