CVSS: 7.5EPSS: 3%CPEs: 3EXPL: 0CVE-2005-3912
https://notcve.org/view.php?id=CVE-2005-3912
Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, allows remote attackers to cause a denial of service (crash or memory consumption) and possibly execute arbitrary code via format string specifiers in the username parameter to the login form, which is ultimately used in a syslog call. NOTE: the code execution might be associated with an issue in Perl. • http://lists.immunitysec.com/pipermail/dailydave/2005-November/002685.html http://secunia.com/advisories/17749 http://secunia.com/advisories/17817 http://secunia.com/advisories/17878 http://secunia.com/advisories/17942 http://secunia.com/advisories/18101 http://secunia.com/advisories/22556 http://www.debian.org/security/2006/dsa-1199 http://www.dyadsecurity.com/webmin-0001.html http://www.gentoo.org/security/en/glsa/glsa-200512-02.xml http://www.mandriva.com/security/advisori •
CVSS: 10.0EPSS: 0%CPEs: 60EXPL: 0CVE-2005-1177
https://notcve.org/view.php?id=CVE-2005-1177
Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact. • http://securitytracker.com/id?1013723 http://www.webmin.com/changes.html http://www.webmin.com/uchanges.html https://exchange.xforce.ibmcloud.com/vulnerabilities/20607 •
CVSS: 5.0EPSS: 0%CPEs: 5EXPL: 0CVE-2005-0427
https://notcve.org/view.php?id=CVE-2005-0427
The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password. Las compilaciones de Webmin anteriores a la versión 1.170-r3 en Gentoo Linux incluye la contraseña cifrada de root en el fichero miniserv.users cuando crea un tbz2 del paquete webmin, lo que permite a atacantes remotos obtener y posiblemente 'craquear' la contraseña cifrada. • http://bugs.gentoo.org/show_bug.cgi?id=77731 http://www.gentoo.org/security/en/glsa/glsa-200502-12.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/19315 •