PT-2004-1681 · Webmin · Webmin

Keigo Yamazaki · Published 2004-06-23 · Updated 2017-07-11 · CVE-2004-0582

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Webmin version 1.140

Description A remote attacker can bypass access control rules and gain read access to configuration information for a module due to an unknown vulnerability in the software.

Recommendations For Webmin version 1.140, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0582

DSA-526

Affected Products

Webmin

References · 11

• http://securityfocus.com/bid/10474 · Vendor Advisory
• http://debian.org/security/2004/dsa-526 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0582 · Security Note
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074 · Vendor Advisory
• http://securityfocus.com/bid/10522 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200406-12.xml · Vendor Advisory
• http://marc.info/?l=bugtraq&m=108697184602191&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16333 · Note
• http://lac.co.jp/security/csl/intelligence/SNSadvisory_e/74_e.html · Note
• http://webmin.com/changes-1.150.html · Note