CVE-1999-1074

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 1999-12-31 · updated 2026-06-16

Description

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.

Affected products

Webmin: 0.1, 0.2, 0.3, 0.4, 0.21, 0.22 (+3)

References

http://www.securityfocus.com/archive/1/9138
http://www.securityfocus.com/bid/98
http://www.webmin.com/webmin/changes.html
http://www.securityfocus.com/archive/1/9138
http://www.securityfocus.com/bid/98
http://www.webmin.com/webmin/changes.html

Get alerted when CVE-1999-1074 or the next vulnerability affects your stack