CVE

Id
14248  
CVE No.
CVE-2005-3042  
Status
Candidate  
Description
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).  
Phase
Assigned (20050922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
105889 14248 CVE-2005-3042 BUGTRAQ:20050921 [SNS Advisory No.83] Webmin/Usermin PAM Authentication Bypass Vulnerability  View
105890 14248 CVE-2005-3042 URL:http://archives.neohapsis.com/archives/bugtraq/2005-09/0257.html  View
105891 14248 CVE-2005-3042 MISC:http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/83_e.html  View
105892 14248 CVE-2005-3042 CONFIRM:http://www.webmin.com/changes-1.230.html  View
105893 14248 CVE-2005-3042 CONFIRM:http://www.webmin.com/uchanges-1.160.html  View
105894 14248 CVE-2005-3042 GENTOO:GLSA-200509-17  View
105895 14248 CVE-2005-3042 URL:http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml  View
105896 14248 CVE-2005-3042 MANDRIVA:MDKSA-2005:176  View
105897 14248 CVE-2005-3042 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:176  View
105898 14248 CVE-2005-3042 SUSE:SUSE-SR:2005:024  View
105899 14248 CVE-2005-3042 URL:http://www.novell.com/linux/security/advisories/2005_24_sr.html  View
105900 14248 CVE-2005-3042 JVN:JVN#40940493  View
105901 14248 CVE-2005-3042 URL:http://jvn.jp/jp/JVN%2340940493/index.html  View
105902 14248 CVE-2005-3042 BID:14889  View
105903 14248 CVE-2005-3042 URL:http://www.securityfocus.com/bid/14889  View
105904 14248 CVE-2005-3042 VUPEN:ADV-2005-1791  View
105905 14248 CVE-2005-3042 URL:http://www.vupen.com/english/advisories/2005/1791  View
105906 14248 CVE-2005-3042 OSVDB:19575  View
105907 14248 CVE-2005-3042 URL:http://www.osvdb.org/19575  View
105908 14248 CVE-2005-3042 SECUNIA:16858  View
105909 14248 CVE-2005-3042 URL:http://secunia.com/advisories/16858  View
105910 14248 CVE-2005-3042 SECUNIA:17282  View
105911 14248 CVE-2005-3042 URL:http://secunia.com/advisories/17282  View
105912 14248 CVE-2005-3042 SREASON:17  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62500 JVNDB-2005-000702 Linux Kernel の routing_ioctl() 関数における Null ポインタデリファレンスの脆弱性 Linux Kernel には 64 bit 用 Kernel では、32 bit 互換 の routing_ioctl() 関数において、sockfd_put() 関数で Null ポインタデリファレンスが発生する、および x86-64 用 Kernel では、32 bit 互換の tiocgdev() 関数において、fput() 関数の処理が不適切である脆弱性が存在します。 CVE-2005-3044 14248 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000702.html  View