CVE-2005-3042

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-09-22 · updated 2026-06-16

Description

miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).

Affected products

Usermin: 1.150
Webmin: 1.2.20

References

http://archives.neohapsis.com/archives/bugtraq/2005-09/0257.html
http://jvn.jp/jp/JVN%2340940493/index.html
http://secunia.com/advisories/16858
http://secunia.com/advisories/17282
http://securityreason.com/securityalert/17
http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml
http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/83_e.html
http://www.mandriva.com/security/advisories?name=MDKSA-2005:176
http://www.novell.com/linux/security/advisories/2005_24_sr.html
http://www.osvdb.org/19575
http://www.securityfocus.com/bid/14889
http://www.vupen.com/english/advisories/2005/1791

Get alerted when CVE-2005-3042 or the next vulnerability affects your stack