Signature Detail
Short Name |
HTTP:PKG:WEBMIN-FILEDISC |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Webmin File Disclosure |
Release Date |
2006/07/12 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Webmin File Disclosure
This signature detects attempts to exploit a known vulnerability against Webmin. Attackers can send a maliciously crafted request that reveals the contents of any file on the server.
Extended Description
Webmin and Usermin are prone to an unspecified information-disclosure vulnerability. This issue is due to a failure in the applications to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve potentially sensitive information. This issue affects Webmin versions prior to 1.290 and Usermin versions prior to 1.220. Unconfirmed reports suggest that this issue is the same as the one discussed in BID 18613 (Webmin Remote Directory Traversal Vulnerability). However, the fixes associated with that issue did not completely solve the vulnerability.
Affected Products
- Debian Linux 3.1.0
- Debian Linux 3.1.0 Alpha
- Debian Linux 3.1.0 Amd64
- Debian Linux 3.1.0 Arm
- Debian Linux 3.1.0 Hppa
- Debian Linux 3.1.0 Ia-32
- Debian Linux 3.1.0 Ia-64
- Debian Linux 3.1.0 M68k
- Debian Linux 3.1.0 Mips
- Debian Linux 3.1.0 Mipsel
- Debian Linux 3.1.0 Ppc
- Debian Linux 3.1.0 S/390
- Debian Linux 3.1.0 Sparc
- Gentoo Linux
- Mandriva Corporate Server 3.0.0
- Mandriva Corporate Server 3.0.0 X86 64
- Mandriva Linux Mandrake 2006.0.0
- Mandriva Linux Mandrake 2006.0.0 X86 64
- Webmin Usermin 0.4.0
- Webmin Usermin 0.5.0
- Webmin Usermin 0.6.0
- Webmin Usermin 0.7.0
- Webmin Usermin 0.8.0
- Webmin Usermin 0.9.0
- Webmin Usermin 0.91.0
- Webmin Usermin 0.92.0
- Webmin Usermin 0.93.0
- Webmin Usermin 0.94.0
- Webmin Usermin 0.95.0
- Webmin Usermin 0.96.0
- Webmin Usermin 0.97.0
- Webmin Usermin 0.98.0
- Webmin Usermin 0.99.0
- Webmin Usermin 1.0.0
- Webmin Usermin 1.110.0
- Webmin Usermin 1.120.0
- Webmin Usermin 1.130.0
- Webmin Usermin 1.140.0
- Webmin Usermin 1.150.0
- Webmin Usermin 1.160.0
- Webmin Usermin 1.170.0
- Webmin Usermin 1.180.0
- Webmin 1.0.0 00
- Webmin 1.0.0 20
- Webmin 1.0.0 50
- Webmin 1.0.0 60
- Webmin 1.0.0 70
- Webmin 1.0.0 80
- Webmin 1.0.0 90
- Webmin 1.100.0
- Webmin 1.110.0
- Webmin 1.121.0
- Webmin 1.130.0
- Webmin 1.140.0
- Webmin 1.150.0
- Webmin 1.160.0
- Webmin 1.170.0
- Webmin 1.180.0
- Webmin 1.190.0
- Webmin 1.200.0
- Webmin 1.210.0
- Webmin 1.220.0
- Webmin 1.230.0
- Webmin 1.240.0
- Webmin 1.250.0
- Webmin 1.260.0
- Webmin 1.270.0
- Webmin 1.280.0
References
- BugTraq: 18744
- CVE: CVE-2005-1177
- URL: http://www.webmin.com/
- URL: http://securitytracker.com/id?1013723