Nessus Plugin #15156

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA319] DSA-319-1 webmin

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-319-1 webmin

Version:

$Revision: 1.4 $

Cve_id:

CAN-2003-0101

Bugtraq_id:

6915

Xrefs:

DSA:319

Description:

miniserv.pl in the webmin package does not properly handle
metacharacters, such as line feeds and carriage returns, in
Base64-encoded strings used in Basic authentication. This
vulnerability allows remote attackers to spoof a session ID, and
thereby gain root privileges.
For the stable distribution (woody) this problem has been fixed in
version 0.94-7woody1.
The old stable distribution (potato) does not contain a webmin package.
For the unstable distribution (sid) this problem is fixed in version
1.070-1.
We recommend that you update your webmin package.


Solution : http://www.debian.org/security/2003/dsa-319
Risk factor : High