The webmin development team reports :

An attacker without a login to Webmin can read the contents of any file on the server using a specially crafted URL. All users should upgrade to version 1.290 as soon as possible, or setup IP access control in Webmin.

The version of Webmin installed on the remote host is affected by an information disclosure flaw due to a flaw in the Perl script 'miniserv.pl'. This flaw could allow a remote, unauthenticated attacker to read arbitrary files on the affected host, subject to the privileges of the web server user .

Several vulnerabilities have been identified in webmin, a web-based administration toolkit. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities :

  - CVE-2005-3912     A format string vulnerability in miniserv.pl could allow     an attacker to cause a denial of service by crashing the     application or exhausting system resources, and could     potentially allow arbitrary code execution.

  - CVE-2006-3392     Improper input sanitization in miniserv.pl could allow     an attacker to read arbitrary files on the webmin host     by providing a specially crafted URL path to the     miniserv http server.

  - CVE-2006-4542     Improper handling of null characters in URLs in     miniserv.pl could allow an attacker to conduct     cross-site scripting attacks, read CGI program source     code, list local directories, and potentially execute     arbitrary code.

Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, m68k, mips, mipsel, powerpc, s390 and sparc.

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files. NOTE: This is a different issue than CVE-2006-3274.

Updated packages have been patched to correct this issue.

リモートホストにインストールされているWebminのバージョンは、Perlスクリプト「miniserv.pl」内の欠陥が原因で情報漏洩の欠陥の影響を受けます。この欠陥により、認証されていない攻撃者が、WebサーバーユーザーIDの権限に従って、影響を受けるホストで任意のファイルを読み取る可能性があります。

リモートホストにインストールされている Usermin は、Perl スクリプト「miniserv.pl」の情報漏洩の欠陥の影響を受けます。この欠陥により、認証されていないリモートの攻撃者が、影響を受けるホスト上の任意のファイルを読み取る可能性があります。これは、Web サーバーのユーザー ID の権限の影響を受けます。

The remote host is affected by the vulnerability described in GLSA-200608-11 (Webmin, Usermin: File Disclosure)

    A vulnerability in both Webmin and Usermin has been discovered by Kenny     Chen, wherein simplify_path is called before the HTML is decoded.
  Impact :

    A non-authenticated user can read any file on the server using a     specially crafted URL.
  Workaround :

    For a temporary workaround, IP Access Control can be setup on Webmin     and Usermin.

The Usermin install on the remote host is affected by an information disclosure flaw in the Perl script 'miniserv.pl'. This flaw could allow a remote, unauthenticated attacker to read arbitrary files on the affected host, subject to the privileges of the web server user id.

远程主机上安装的 Usermin 受到 Perl 脚本“miniserv.pl”中的一个信息泄露缺陷的影响。此缺陷可允许未经认证的远程攻击者以 Web 服务器用户 ID 的权限读取受影响主机上的任意文件。

遠端主機上安裝的 Webmin 受到一個資訊洩漏瑕疵影響，這是因為 Perl 的指令碼「miniserv.pl」中有一個瑕疵。未經驗證的遠端攻擊者可利用此瑕疵來讀取受影響主機上的任意檔案，但這需要具有 Web 伺服器使用者 ID 的權限。

遠端主機上安裝的 Usermin 受到 Perl 指令碼「miniserv.pl」中的一個資訊洩漏瑕疵影響。此瑕疵可允許未經驗證的遠端攻擊者讀取受影響主機上的任意檔案 (視 Web 伺服器使用者 ID 的權限而定)。

ID	名稱	產品	系列	已發布	已更新	嚴重性
21789	FreeBSD : webmin, usermin -- arbitrary file disclosure vulnerability (227475c2-09cb-11db-9156-000e0c2e438a)	Nessus	FreeBSD Local Security Checks	2006/7/3	2021/1/6	medium
21785	Webmin 'miniserv.pl' Arbitrary File Disclosure	Nessus	CGI abuses	2006/6/30	2021/1/19	medium
22908	Debian DSA-1199-1 : webmin - multiple vulnerabilities	Nessus	Debian Local Security Checks	2006/10/25	2021/1/4	high
23876	Mandrake Linux Security Advisory : webmin (MDKSA-2006:125)	Nessus	Mandriva Local Security Checks	2006/12/16	2021/1/6	medium
21785	Webmin「miniserv.pl」の任意のファイルの漏洩	Nessus	CGI abuses	2006/6/30	2021/1/19	medium
77704	Usermin「miniserv.pl」の任意のファイルの漏洩	Nessus	CGI abuses	2014/9/16	2021/1/19	medium
22169	GLSA-200608-11 : Webmin, Usermin: File Disclosure	Nessus	Gentoo Local Security Checks	2006/8/7	2021/1/6	medium
77704	Usermin 'miniserv.pl' Arbitrary File Disclosure	Nessus	CGI abuses	2014/9/16	2021/1/19	medium
77704	Usermin“miniserv.pl”任意文件泄露	Nessus	CGI abuses	2014/9/16	2021/1/19	medium
21785	Webmin「miniserv.pl」任意檔案洩漏	Nessus	CGI abuses	2006/6/30	2021/1/19	medium
77704	Usermin 'miniserv.pl' 任意檔案洩漏	Nessus	CGI abuses	2014/9/16	2021/1/19	medium

偵測

搜尋 Plugin

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium