CVE-1999-1074

No fix known EPSS 2%

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.

Published 2002-03-09 · CVE record · OSV

Products: webmin