3.6

CVE-2006-4246

Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Usermin ≫ Usermin Version <= 1.210
Usermin ≫ Usermin Version 0.4
Usermin ≫ Usermin Version 0.5
Usermin ≫ Usermin Version 0.6
Usermin ≫ Usermin Version 0.7
Usermin ≫ Usermin Version 0.8
Usermin ≫ Usermin Version 0.9
Usermin ≫ Usermin Version 0.91
Usermin ≫ Usermin Version 0.92
Usermin ≫ Usermin Version 0.93
Usermin ≫ Usermin Version 0.94
Usermin ≫ Usermin Version 0.95
Usermin ≫ Usermin Version 0.96
Usermin ≫ Usermin Version 0.97
Usermin ≫ Usermin Version 0.98
Usermin ≫ Usermin Version 0.99
Usermin ≫ Usermin Version 1.000
Usermin ≫ Usermin Version 1.010
Usermin ≫ Usermin Version 1.020
Usermin ≫ Usermin Version 1.030
Usermin ≫ Usermin Version 1.040
Usermin ≫ Usermin Version 1.051
Usermin ≫ Usermin Version 1.060
Usermin ≫ Usermin Version 1.070
Usermin ≫ Usermin Version 1.080
Usermin ≫ Usermin Version 1.090
Usermin ≫ Usermin Version 1.100
Usermin ≫ Usermin Version 1.110
Usermin ≫ Usermin Version 1.120
Usermin ≫ Usermin Version 1.130
Usermin ≫ Usermin Version 1.140
Usermin ≫ Usermin Version 1.150
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.88% 0.562
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:P/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.webmin.com/uchanges.html
Patch
http://secunia.com/advisories/21968
Vendor Advisory
http://secunia.com/advisories/21981
Patch
Vendor Advisory
http://sourceforge.net/tracker/index.php?func=detail&aid=1509145&group_id=17457&atid=485894
Patch
http://www.debian.org/security/2006/dsa-1177
Patch
http://www.osreviews.net/reviews/admin/usermin
http://www.securityfocus.com/bid/18574
Patch
http://www.vupen.com/english/advisories/2006/3668
https://exchange.xforce.ibmcloud.com/vulnerabilities/29010