PT-2006-4168 · Webmin · Webmin

Keigo Yamazaki · Publicado 2006-06-28 · Atualizado 2018-10-18 · CVE-2006-3274

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.280

Description A directory traversal issue allows remote attackers to read arbitrary files via backslash characters in the URL to certain directories under the web root, such as the image directory, when Webmin is run on Windows.

Recommendations For versions prior to 1.280, update to version 1.280 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-3274

Produtos afetados

Webmin

Referências · 11

• http://lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html · Nota
• http://jvn.jp/jp/JVN%2367974490/index.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27366 · Nota
• http://vupen.com/english/advisories/2006/2493 · Nota
• http://securityfocus.com/archive/1/438149/100/0/threaded · Nota
• http://securityfocus.com/bid/18613 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3274 · Nota de Segurança
• http://securitytracker.com/id?1016375 · Nota
• http://webmin.com/changes.html · Nota
• http://securityreason.com/securityalert/1161 · Nota
• http://secunia.com/advisories/20777 · Aviso do Fabricante