CVE-2005-0427: Medium severity Gentoo Webmin vulnerability
The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0427?
CVE-2005-0427 is classified as a medium severity vulnerability due to the exposure of the encrypted root password.
How do I fix CVE-2005-0427?
To fix CVE-2005-0427, update Webmin to a version that does not include the root password in the miniserv.users file.
What versions of Webmin are affected by CVE-2005-0427?
CVE-2005-0427 affects Webmin versions 1.140, 1.150, 1.160, and 1.170-r1, and 1.170-r2 on Gentoo Linux.
What are the consequences of the CVE-2005-0427 vulnerability?
The consequence of CVE-2005-0427 is that remote attackers can potentially obtain and crack the encrypted root password.
How can I check if my system is vulnerable to CVE-2005-0427?
You can check if your system is vulnerable to CVE-2005-0427 by inspecting the miniserv.users file for an encrypted root password in Webmin versions mentioned.