CVSS: 10.0EPSS: 0%CPEs: 60EXPL: 0CVE-2005-1177
https://notcve.org/view.php?id=CVE-2005-1177
19 Apr 2005 — Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact. • http://securitytracker.com/id?1013723 •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2005-0427
https://notcve.org/view.php?id=CVE-2005-0427
15 Feb 2005 — The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password. Las compilaciones de Webmin anteriores a la versión 1.170-r3 en Gentoo Linux incluye la contraseña cifrada de root en el fichero miniserv.users cuando crea un tbz2 del paquete webmin, lo que permite a atacantes remotos obtener y posiblemente 'craquear' la contraseña c... • http://bugs.gentoo.org/show_bug.cgi?id=77731 •
CVSS: 9.8EPSS: 4%CPEs: 22EXPL: 1CVE-2004-1468
https://notcve.org/view.php?id=CVE-2004-1468
31 Dec 2004 — The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message. • http://secunia.com/advisories/12488 •
CVSS: 5.5EPSS: 0%CPEs: 28EXPL: 0CVE-2004-0559
https://notcve.org/view.php?id=CVE-2004-0559
24 Sep 2004 — The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory. El script maketemp.pl en Usermin 1.070 y 1.080 permite a usuarios locales sobreescribir ficheros de su elección durante la instalación mediante un ataque de enlaces simbólicos en el directorio /tmp/.usermin • http://secunia.com/advisories/12488 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2004-0582
https://notcve.org/view.php?id=CVE-2004-0582
23 Jun 2004 — Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module. Vulnerabilidad desconocidad en Webmin 1.140 permite a atacantes remotos saltarse reglas de control de acceso y conseguir acceso de lectura a información de configuración de un módulo. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000848 •
CVSS: 9.8EPSS: 1%CPEs: 14EXPL: 0CVE-2004-0583
https://notcve.org/view.php?id=CVE-2004-0583
23 Jun 2004 — The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords. La funcionalidad lockout en (1)Webmin 1.140 y (2) Usermin 1.070 no process ciertas cadenas de caractéreis, lo que permite a atacanetes remotos conducir un ataque de fuerza bruta para averiguar IDs de usuario y contraseñas. • http://marc.info/?l=bugtraq&m=108737059313829&w=2 •
CVSS: 10.0EPSS: 15%CPEs: 18EXPL: 1CVE-2003-0101 – Webmin 0.9x / Usermin 0.9x/1.0 - Access Session ID Spoofing
https://notcve.org/view.php?id=CVE-2003-0101
26 Feb 2003 — miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges. miniserv.pl en Webmin anterior a 1.070 y Usermin antes de 1.000 no maneja adecuadamente metacaractéres como avance de línea y retorno de carro (CRLF) en cadenas codificadas en Base-64 durante la autenticación básica, lo que... • https://www.exploit-db.com/exploits/22275 •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2002-1672
https://notcve.org/view.php?id=CVE-2002-1672
31 Dec 2002 — Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials. • http://online.securityfocus.com/archive/1/263181 •
CVSS: 7.1EPSS: 0%CPEs: 25EXPL: 2CVE-2002-1673 – Webmin 0.x - Code Input Validation
https://notcve.org/view.php?id=CVE-2002-1673
31 Dec 2002 — The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file. • https://www.exploit-db.com/exploits/21348 •
CVSS: 7.5EPSS: 0%CPEs: 23EXPL: 0CVE-2002-1947
https://notcve.org/view.php?id=CVE-2002-1947
31 Dec 2002 — Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session. • ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc •