VULNERABILITY INTELLIGENCE
CVE-2005-3042
CVSS score7.5 HIGH
EPSS probability4.13%
CISA KEVNot currently listed
Published2005-09-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org