CVE-2014-3883: OS Command Injection
Published Jun 21, 2014
·Updated
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action.
Affected Software
76 affected components
Webmin Usermin<=1.590
Webmin Usermin=0.4
Webmin Usermin=0.5
Webmin Usermin=0.6
Webmin Usermin=0.7
Webmin Usermin=0.80
Webmin Usermin=0.90
Webmin Usermin=0.910
Webmin Usermin=0.929
Webmin Usermin=0.930
Webmin Usermin=0.940
Webmin Usermin=0.950
Webmin Usermin=0.960
Webmin Usermin=0.970
Webmin Usermin=0.980
Webmin Usermin=0.990
Webmin Usermin=1.000
Webmin Usermin=1.010
Webmin Usermin=1.020
Webmin Usermin=1.030
Webmin Usermin=1.040
Webmin Usermin=1.050
Webmin Usermin=1.051
Webmin Usermin=1.060
Webmin Usermin=1.070
Webmin Usermin=1.080
Webmin Usermin=1.090
Webmin Usermin=1.100
Webmin Usermin=1.110
Webmin Usermin=1.120
Webmin Usermin=1.130
Webmin Usermin=1.140
Webmin Usermin=1.150
Webmin Usermin=1.160
Webmin Usermin=1.170
Webmin Usermin=1.180
Webmin Usermin=1.190
Webmin Usermin=1.200
Webmin Usermin=1.210
Webmin Usermin=1.220
Webmin Usermin=1.230
Webmin Usermin=1.240
Webmin Usermin=1.250
Webmin Usermin=1.260
Webmin Usermin=1.270
Webmin Usermin=1.280
Webmin Usermin=1.290
Webmin Usermin=1.300
Webmin Usermin=1.310
Webmin Usermin=1.320
Webmin Usermin=1.330
Webmin Usermin=1.340
Webmin Usermin=1.350
Webmin Usermin=1.360
Webmin Usermin=1.370
Webmin Usermin=1.380
Webmin Usermin=1.390
Webmin Usermin=1.400
Webmin Usermin=1.410
Webmin Usermin=1.420
Webmin Usermin=1.430
Webmin Usermin=1.440
Webmin Usermin=1.450
Webmin Usermin=1.460
Webmin Usermin=1.470
Webmin Usermin=1.480
Webmin Usermin=1.490
Webmin Usermin=1.500
Webmin Usermin=1.510
Webmin Usermin=1.520
Webmin Usermin=1.530
Webmin Usermin=1.540
Webmin Usermin=1.550
Webmin Usermin=1.560
Webmin Usermin=1.570
Webmin Usermin=1.580
Event History
Jun 21, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3883?
CVE-2014-3883 is classified as a critical vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2014-3883?
To fix CVE-2014-3883, update Usermin to version 1.600 or later as recommended by the developers.
3
What are the potential impacts of CVE-2014-3883?
The potential impacts of CVE-2014-3883 include unauthorized access and execution of arbitrary operating system commands.
4
What versions of Usermin are affected by CVE-2014-3883?
Usermin versions prior to 1.600, including all versions from 0.4 up to and including 1.590, are affected by CVE-2014-3883.
5
Is there a workaround for CVE-2014-3883 until I can update Usermin?
Disabling remote access to Usermin can serve as a temporary workaround for CVE-2014-3883 until an update can be applied.