Back to search
CVE-2004-0583
Published: Jun 23, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
10474
vdb-entry
x_refsource_BID
DSA-526
vendor-advisory
x_refsource_DEBIAN
webmin-username-password-dos(16334)
vdb-entry
x_refsource_XF
10523
vdb-entry
x_refsource_BID
MDKSA-2004:074
vendor-advisory
x_refsource_MANDRAKE
20040611 [SNS Advisory No.75] Webmin/Usermin Account Lockout Bypass Vulnerability
mailing-list
x_refsource_BUGTRAQ
GLSA-200406-15
vendor-advisory
x_refsource_GENTOO
http://www.webmin.com/changes-1.150.html
x_refsource_CONFIRM
GLSA-200406-12
vendor-advisory
x_refsource_GENTOO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now