CVE-2004-0583

Fixed in a distro release EPSS 2%

The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.

Published 2004-06-23 · CVE record · OSV

Products: usermin, webmin, debian_linux

Distro releases