Package name
webmin
Date
2005-12-02
Advisory ID
MDKSA-2005:223
Affected versions
2006.0 i586 , CS2.1 i586 , 10.2 i586 , 10.1 i586 , CS2.1 x86_64 , CS3.0 x86_64 , CS3.0 i586 , 10.2 x86_64 , 2006.0 x86_64 , 10.1 x86_64

Problem description

Jack Louis discovered a format string vulnerability in miniserv.pl
Perl web server in Webmin before 1.250 and Usermin before 1.180,
with syslog logging enabled. This can allow remote attackers to cause
a denial of service (crash or memory consumption) and possibly execute
arbitrary code via format string specifiers in the username parameter
to the login form, which is ultimately used in a syslog call.

Updated packages

2006.0 i586

 25b784d8c69c42f5f816272f47528156  2006.0/RPMS/webmin-1.220-9.2.20060mdk.noarch.rpm
 64772a0268b55e2d2650f4c43f4fe0b2  2006.0/SRPMS/webmin-1.220-9.2.20060mdk.src.rpm

CS2.1 i586

 303bd86b1156ea7ff6d08654fe824707  corporate/2.1/RPMS/webmin-0.990-6.6.C21mdk.noarch.rpm
 0141850dc79c0ef041bd077264213dc9  corporate/2.1/SRPMS/webmin-0.990-6.6.C21mdk.src.rpm

10.2 i586

 5ff784b1c60b7cc2fbc39487c22b6b78  10.2/RPMS/webmin-1.180-1.2.102mdk.noarch.rpm
 060c31856652e82003997150f9403021  10.2/SRPMS/webmin-1.180-1.2.102mdk.src.rpm

10.1 i586

 1c75e57f72de9b9eb187d18de15d9a0b  10.1/RPMS/webmin-1.150-3.2.101mdk.noarch.rpm
 fb3f30131577c5e7e799ee58264055aa  10.1/SRPMS/webmin-1.150-3.2.101mdk.src.rpm

CS2.1 x86_64

 8bb1b1dd0afea4178626fd6d8470b730  x86_64/corporate/2.1/RPMS/webmin-0.990-6.6.C21mdk.noarch.rpm
 0141850dc79c0ef041bd077264213dc9  x86_64/corporate/2.1/SRPMS/webmin-0.990-6.6.C21mdk.src.rpm

CS3.0 x86_64

 abd80f852fa1c5628da3613623a1f1c1  x86_64/corporate/3.0/RPMS/webmin-1.121-4.5.C30mdk.noarch.rpm
 d38cdd7a15e0340ca4e5aa95e8a5b5ec  x86_64/corporate/3.0/SRPMS/webmin-1.121-4.5.C30mdk.src.rpm

CS3.0 i586

 5826c5c5fea5793c594d4fa46cae6338  corporate/3.0/RPMS/webmin-1.121-4.5.C30mdk.noarch.rpm
 d38cdd7a15e0340ca4e5aa95e8a5b5ec  corporate/3.0/SRPMS/webmin-1.121-4.5.C30mdk.src.rpm

10.2 x86_64

 a268a1aa09cf68c7727aa7f0f479c8ac  x86_64/10.2/RPMS/webmin-1.180-1.2.102mdk.noarch.rpm
 060c31856652e82003997150f9403021  x86_64/10.2/SRPMS/webmin-1.180-1.2.102mdk.src.rpm

2006.0 x86_64

 bab0f651f140671b4bb01f65b9799de9  x86_64/2006.0/RPMS/webmin-1.220-9.2.20060mdk.noarch.rpm
 64772a0268b55e2d2650f4c43f4fe0b2  x86_64/2006.0/SRPMS/webmin-1.220-9.2.20060mdk.src.rpm

10.1 x86_64

 39782b6c2fe898596023ad384cd2d5ce  x86_64/10.1/RPMS/webmin-1.150-3.2.101mdk.noarch.rpm
 fb3f30131577c5e7e799ee58264055aa  x86_64/10.1/SRPMS/webmin-1.150-3.2.101mdk.src.rpm

References