CVE-2005-3912: High severity Webmin Webmin vulnerability
Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, allows remote attackers to cause a denial of service (crash or memory consumption) and possibly execute arbitrary code via format string specifiers in the username parameter to the login form, which is ultimately used in a syslog call. NOTE: the code execution might be associated with an issue in Perl.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3912?
CVE-2005-3912 has a medium severity rating due to its potential for denial of service and arbitrary code execution.
How do I fix CVE-2005-3912?
To fix CVE-2005-3912, upgrade Webmin to version 1.250 or higher and Usermin to version 1.180 or higher.
What systems are affected by CVE-2005-3912?
CVE-2005-3912 affects Webmin versions prior to 1.250 and Usermin versions prior to 1.180.
Can CVE-2005-3912 be exploited remotely?
Yes, CVE-2005-3912 can be exploited remotely by attackers who can manipulate username format string specifiers.
What consequences can result from CVE-2005-3912 exploitation?
Exploitation of CVE-2005-3912 can lead to a denial of service, crashing the server or consuming excessive memory, and potentially executing arbitrary code.