• info
• discussion
• exploit
• solution
• references

Webmin Configuration Module Information Disclosure Vulnerability

Solution:
The vendor has released an upgrade dealing with this issue.

Turbolinux has released advisory 20050207 [TURBOLINUX SECURITY INFO] 07/Feb/2005 to address various issues. Please see the referenced advisory for more information.


Webmin Webmin 1.0 70

• TurboLinux webmin-1.070-3.noarch.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/webmin-1.070-3.noarch.rpm


• TurboLinux webmin-1.070-3.noarch.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd ates/RPMS/webmin-1.070-3.noarch.rpm


• TurboLinux webmin-1.070-3.noarch.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 8/updates/RPMS/webmin-1.070-3.noarch.rpm


• Webmin webmin-1.150.tar.gz
  http://prdownloads.sourceforge.net/webadmin/webmin-1.150.tar.gz

Webmin Webmin 1.140

• Webmin webmin-1.150.tar.gz
  http://prdownloads.sourceforge.net/webadmin/webmin-1.150.tar.gz