NVD

Id
69550  
Name
CVE-2005-3912  
Description
Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, allows remote attackers to cause a denial of service (crash or memory consumption) and possibly execute arbitrary code via format string specifiers in the username parameter to the login form, which is ultimately used in a syslog call. NOTE: the code execution might be associated with an issue in Perl.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-11-30  
Modified Date
2011-03-07  
Seq
2005-3912  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
359551 69550 CVE-2005-3912 [Dailydave] 20051129 Webmin miniserv.pl format string vulnerability  View
359552 69550 CVE-2005-3912 DSA-1199  View
359553 69550 CVE-2005-3912 http://www.dyadsecurity.com/webmin-0001.html  View
359554 69550 CVE-2005-3912 GLSA-200512-02  View
359555 69550 CVE-2005-3912 MDKSA-2005:223  View
359556 69550 CVE-2005-3912 SUSE-SR:2005:030  View
359557 69550 CVE-2005-3912 20051129 Webmin miniserv.pl format string vulnerability  View
359558 69550 CVE-2005-3912 ADV-2005-2660  View
359559 69550 CVE-2005-3912 http://www.webmin.com/changes-1.250.html  View
359560 69550 CVE-2005-3912 http://www.webmin.com/security.html  View
359561 69550 CVE-2005-3912 http://www.webmin.com/uchanges-1.180.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62628 JVNDB-2005-000868 Webmin および Usermin の miniserv.pl におけるフォーマットストリングの脆弱性 Webmin および Usermin の Web サーバプログラム miniserv.pl には、syslog が有効な場合、ログイン失敗時のロギングにより、フォーマットストリングの脆弱性が存在します。 CVE-2005-3912 15114 CVE-2005-3912 69550 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000868.html 2005-11-30 2007-05-17 View