NVD

Id
71010  
Name
CVE-2004-0583  
Description
The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2004-08-06  
Modified Date
2017-07-10  
Seq
2004-0583  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366564 71010 CVE-2004-0583 20040611 [SNS Advisory No.75] Webmin/Usermin Account Lockout Bypass Vulnerability  View
366565 71010 CVE-2004-0583 DSA-526  View
366566 71010 CVE-2004-0583 GLSA-200406-12  View
366567 71010 CVE-2004-0583 GLSA-200406-15  View
366568 71010 CVE-2004-0583 http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/75_e.html  View
366569 71010 CVE-2004-0583 MDKSA-2004:074  View
366570 71010 CVE-2004-0583 10474  View
366571 71010 CVE-2004-0583 10523  View
366572 71010 CVE-2004-0583 http://www.webmin.com/changes-1.150.html  View
366573 71010 CVE-2004-0583 webmin-username-password-dos(16334)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62874 JVNDB-2004-000216 Webmin/Usermin のアカウントロックアウト機能における ID およびパスワードを推測される脆弱性 ------------ CVE-2004-0583 9010 CVE-2004-0583 71010 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000216.html 2004-06-07 2007-04-01 View