PT-2006-4168 · Webmin · Webmin

Keigo Yamazaki · Published 2006-06-28 · Updated 2018-10-18 · CVE-2006-3274

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.280

Description A directory traversal issue allows remote attackers to read arbitrary files via backslash characters in the URL to certain directories under the web root, such as the image directory, when Webmin is run on Windows.

Recommendations For versions prior to 1.280, update to version 1.280 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-3274

Affected Products

Webmin

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2006-3274 · Security Note
• http://secunia.com/advisories/20777 · Vendor Advisory
• http://lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html · Note
• http://jvn.jp/jp/JVN%2367974490/index.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27366 · Note
• http://vupen.com/english/advisories/2006/2493 · Note
• http://securityfocus.com/archive/1/438149/100/0/threaded · Note
• http://securityfocus.com/bid/18613 · Note
• http://securitytracker.com/id?1016375 · Note
• http://webmin.com/changes.html · Note
• http://securityreason.com/securityalert/1161 · Note