CVE-2005-3042

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.13%

Published

Sep 22, 2005

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).

Affected Products (2)

usermin · userminvulnerable

webmin · webminvulnerable

References (20)

http://archives.neohapsis.com/archives/bugtraq/2005-09/0257.html

PatchVendor Advisory

http://jvn.jp/jp/JVN%2340940493/index.html

http://secunia.com/advisories/16858

PatchVendor Advisory

http://secunia.com/advisories/17282

http://securityreason.com/securityalert/17

http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml

http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/83_e.html

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:176

http://www.novell.com/linux/security/advisories/2005_24_sr.html

http://www.osvdb.org/19575

http://www.securityfocus.com/bid/14889

http://www.vupen.com/english/advisories/2005/1791

http://www.webmin.com/changes-1.230.html

Patch

http://www.webmin.com/uchanges-1.160.html

http://archives.neohapsis.com/archives/bugtraq/2005-09/0257.html

PatchVendor Advisory

http://jvn.jp/jp/JVN%2340940493/index.html

http://secunia.com/advisories/16858

PatchVendor Advisory

http://secunia.com/advisories/17282

http://securityreason.com/securityalert/17

http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml

KEV Catalog EPSS Scores Vendors All CVEs