CVE-2012-2983 file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file fie...
MediumCVSS 5.0
EPSS 20.5%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo webmin | <= 1.590 | No fix listed |
| gentoo webmin | = 1.140 | No fix listed |
| gentoo webmin | = 1.150 | No fix listed |
| gentoo webmin | = 1.160 | No fix listed |
| gentoo webmin | = 1.170 | No fix listed |
| gentoo webmin | = 1.180 | No fix listed |
| gentoo webmin | = 1.200 | No fix listed |
| gentoo webmin | = 1.210 | No fix listed |
| gentoo webmin | = 1.220 | No fix listed |
| gentoo webmin | = 1.230 | No fix listed |
| gentoo webmin | = 1.240 | No fix listed |
| gentoo webmin | = 1.260 | No fix listed |
| gentoo webmin | = 1.270 | No fix listed |
| gentoo webmin | = 1.280 | No fix listed |
| gentoo webmin | = 1.290 | No fix listed |
| gentoo webmin | = 1.300 | No fix listed |
| gentoo webmin | = 1.310 | No fix listed |
| gentoo webmin | = 1.320 | No fix listed |
| gentoo webmin | = 1.330 | No fix listed |
| gentoo webmin | = 1.340 | No fix listed |
| gentoo webmin | = 1.370 | No fix listed |
| gentoo webmin | = 1.380 | No fix listed |
| gentoo webmin | = 1.390 | No fix listed |
| gentoo webmin | = 1.400 | No fix listed |
| gentoo webmin | = 1.410 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo webmin | = 1.420 | No fix listed |
| gentoo webmin | = 1.430 | No fix listed |
| gentoo webmin | = 1.440 | No fix listed |
| gentoo webmin | = 1.450 | No fix listed |
| gentoo webmin | = 1.470 | No fix listed |
| gentoo webmin | = 1.480 | No fix listed |
| gentoo webmin | = 1.500 | No fix listed |
| gentoo webmin | = 1.510 | No fix listed |
| gentoo webmin | = 1.520 | No fix listed |
| gentoo webmin | = 1.530 | No fix listed |
| gentoo webmin | = 1.550 | No fix listed |
| gentoo webmin | = 1.560 | No fix listed |
| gentoo webmin | = 1.570 | No fix listed |
| gentoo webmin | = 1.580 | No fix listed |
References
- americaninfosec.com
- www.americaninfosec.com
- VU#788478 patch third-party-advisory us-government-resource
- 1027507 vdb-entry
- www.xerox.com
- github.com