Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

usermin: information disclosure and denial of service

Package(s):

usermin

CVE #(s):

Created:

June 21, 2004

Updated:

June 21, 2004

Description:

Versions of the usermin utility prior to 1.080 suffer from two vulnerabilities: a failure to sanitize email which could lead to information disclosure, and one which allows an attacker to lock out an account.

Alerts:

Gentoo

200406-15

2004-06-18

(Log in to post comments)