16140 – Serious security hole in Webmin 1.60

Bug 16140 - Serious security hole in Webmin 1.60

Summary: Serious security hole in Webmin 1.60

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	New packages (show other bugs)
Hardware:	x86 All

Importance:	High critical (vote)
Assignee:	Gentoo Security

URL:	http://www.webmin.com/changes.html
Whiteboard:
Keywords:

Duplicates (1):	16170 (view as bug list)
Depends on:
Blocks:

Reported:	2003-02-21 09:38 UTC by Paul Slinski
Modified:	2003-02-24 05:12 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Paul Slinski 2003-02-21 09:38:35 UTC

A flaw exists in webmin 1.60 that allows unauthenticated access to the
application. Please see the link for futher data.

-Paul

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Comment 1 Martin Holzer (RETIRED) gentoo-dev

2003-02-22 04:54:28 UTC

*** Bug 16170 has been marked as a duplicate of this bug. ***

Comment 2 Daniel Ahlberg (RETIRED) gentoo-dev

2003-02-24 05:12:48 UTC

glsa sent