Webmin CVE-2012-4893 Multiple Cross Site Request Forgery Vulnerabilities
BID:66328
Info
Webmin CVE-2012-4893 Multiple Cross Site Request Forgery Vulnerabilities
| Bugtraq ID: | 66328 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-4893 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 09 2012 12:00AM |
| Updated: | Nov 09 2012 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Webmin Webmin 1.290 Webmin Webmin 1.280 Webmin Webmin 1.270 Webmin Webmin 1.260 Webmin Webmin 1.250 Webmin Webmin 1.240 Webmin Webmin 1.230 Webmin Webmin 1.220 Webmin Webmin 1.210 Webmin Webmin 1.200 Webmin Webmin 1.190 Webmin Webmin 1.180 Webmin Webmin 1.170 Webmin Webmin 1.160 Webmin Webmin 1.150 Webmin Webmin 1.140 Webmin Webmin 1.590 Webmin Webmin 1.580 Webmin Webmin 1.550 Webmin Webmin 1.540 Webmin Webmin 1.500 Webmin Webmin 1.430 Webmin Webmin 1.390 Webmin Webmin 1.370 Webmin Webmin 1.350 Webmin Webmin 1.340 Webmin Webmin 1.330 Webmin Webmin 1.320 Webmin Webmin 1.296 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 |
| Not Vulnerable: | |
Discussion
Webmin CVE-2012-4893 Multiple Cross Site Request Forgery Vulnerabilities
Webmin is prone to multiple cross-site request-forgery vulnerabilities.
Exploiting these issues may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.
Webmin 1.590 and prior versions are vulnerable.
Webmin is prone to multiple cross-site request-forgery vulnerabilities.
Exploiting these issues may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.
Webmin 1.590 and prior versions are vulnerable.
Exploit / POC
Webmin CVE-2012-4893 Multiple Cross Site Request Forgery Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting victim to follow a malicious URI or visit a malicious website.
To exploit these issues, an attacker must entice an unsuspecting victim to follow a malicious URI or visit a malicious website.
Solution / Fix
Webmin CVE-2012-4893 Multiple Cross Site Request Forgery Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
Mandriva Business Server 1 X86 64
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva perl-Authen-Libwrap-0.22-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva webmin-1.680-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/
MandrakeSoft Enterprise Server 5
-
Mandriva perl-Authen-Libwrap-0.22-0.1mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva webmin-1.680-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/
Mandriva Business Server 1 X86 64
-
Mandriva perl-Authen-Libwrap-0.220.0-2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva webmin-1.680-1.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/
References
Webmin CVE-2012-4893 Multiple Cross Site Request Forgery Vulnerabilities
References:
References:
- Webmin Homepage (Webmin)