CVE-2012-2981 Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter.
MediumCVSS 6.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo webmin | <= 1.590 | No fix listed |
| gentoo webmin | = 1.140 | No fix listed |
| gentoo webmin | = 1.150 | No fix listed |
| gentoo webmin | = 1.160 | No fix listed |
| gentoo webmin | = 1.170 | No fix listed |
| gentoo webmin | = 1.180 | No fix listed |
| gentoo webmin | = 1.200 | No fix listed |
| gentoo webmin | = 1.210 | No fix listed |
| gentoo webmin | = 1.220 | No fix listed |
| gentoo webmin | = 1.230 | No fix listed |
| gentoo webmin | = 1.240 | No fix listed |
| gentoo webmin | = 1.260 | No fix listed |
| gentoo webmin | = 1.270 | No fix listed |
| gentoo webmin | = 1.280 | No fix listed |
| gentoo webmin | = 1.290 | No fix listed |
| gentoo webmin | = 1.300 | No fix listed |
| gentoo webmin | = 1.310 | No fix listed |
| gentoo webmin | = 1.320 | No fix listed |
| gentoo webmin | = 1.330 | No fix listed |
| gentoo webmin | = 1.340 | No fix listed |
| gentoo webmin | = 1.370 | No fix listed |
| gentoo webmin | = 1.380 | No fix listed |
| gentoo webmin | = 1.390 | No fix listed |
| gentoo webmin | = 1.400 | No fix listed |
| gentoo webmin | = 1.410 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo webmin | = 1.420 | No fix listed |
| gentoo webmin | = 1.430 | No fix listed |
| gentoo webmin | = 1.440 | No fix listed |
| gentoo webmin | = 1.450 | No fix listed |
| gentoo webmin | = 1.470 | No fix listed |
| gentoo webmin | = 1.480 | No fix listed |
| gentoo webmin | = 1.500 | No fix listed |
| gentoo webmin | = 1.510 | No fix listed |
| gentoo webmin | = 1.520 | No fix listed |
| gentoo webmin | = 1.530 | No fix listed |
| gentoo webmin | = 1.550 | No fix listed |
| gentoo webmin | = 1.560 | No fix listed |
| gentoo webmin | = 1.570 | No fix listed |
| gentoo webmin | = 1.580 | No fix listed |
References
- americaninfosec.com
- www.americaninfosec.com
- VU#788478 patch third-party-advisory us-government-resource
- 1027507 vdb-entry
- www.xerox.com
- github.com patch