Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

webmin: arbitrary file read

Package(s):

webmin

CVE #(s):

CVE-2006-3392

Created:

July 19, 2006

Updated:

August 7, 2006

Description:

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files.

Alerts:

Gentoo	200608-11	2006-08-06
Mandriva	MDKSA-2006:125	2006-07-18

(Log in to post comments)