CVE

Id
9011  
CVE No.
CVE-2004-0583  
Status
Candidate  
Description
The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.  
Phase
Assigned (20040618)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
58175 9011 CVE-2004-0583 BUGTRAQ:20040611 [SNS Advisory No.75] Webmin/Usermin Account Lockout Bypass Vulnerability  View
58176 9011 CVE-2004-0583 URL:http://marc.info/?l=bugtraq&m=108737059313829&w=2  View
58177 9011 CVE-2004-0583 MISC:http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/75_e.html  View
58178 9011 CVE-2004-0583 CONFIRM:http://www.webmin.com/changes-1.150.html  View
58179 9011 CVE-2004-0583 DEBIAN:DSA-526  View
58180 9011 CVE-2004-0583 URL:http://www.debian.org/security/2004/dsa-526  View
58181 9011 CVE-2004-0583 GENTOO:GLSA-200406-12  View
58182 9011 CVE-2004-0583 URL:http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml  View
58183 9011 CVE-2004-0583 GENTOO:GLSA-200406-15  View
58184 9011 CVE-2004-0583 URL:http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml  View
58185 9011 CVE-2004-0583 MANDRAKE:MDKSA-2004:074  View
58186 9011 CVE-2004-0583 URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074  View
58187 9011 CVE-2004-0583 BID:10474  View
58188 9011 CVE-2004-0583 URL:http://www.securityfocus.com/bid/10474  View
58189 9011 CVE-2004-0583 BID:10523  View
58190 9011 CVE-2004-0583 URL:http://www.securityfocus.com/bid/10523  View
58191 9011 CVE-2004-0583 XF:webmin-username-password-dos(16334)  View

Related JVN