26 September 2007, 12:01
Webmin allows execution of arbitrary commands
The Webmin open source remote administration application allows administrators with restricted privileges to execute arbitrary commands. By passing special parameters in URLs, administrators can cause command execution, thereby escalating their privileges. The developers have not disclosed the nature of the required parameters, but have stated that only the Windows version is affected. Webmin 1.370, in which the vulnerability is fixed, has been released for download. Users of Windows versions of Webmin should install the new package as soon as possible.
- Security advisory from the Webmin development team
- Download the latest version of Webmin
(mba)
Print Version | Send by email
| Permalink: http://h-online.com/-733706
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
