Unix and Linux admin console exposed by bug

    Date14 Sep 2004
    4056
    Posted ByAnthony Pell
    Usermin allows users of Unix and Linux to administer their own accounts on a network via a Web-based interface, including reading email. The tool isn't included in Unix or Linux distributions by default, but is often used with Webmin, one of the most popular system administration tools, which ships with Linux distributions such as Suse, Mandrake and Gentoo. A separate, less serious bug affects both Webmin and Usermin, researchers said. . . . A bug in Usermin, a widely-used administration console for Unix and Linux, could allow an attacker to run malicious code via a specially-crafted email, according to security researchers.

    Usermin allows users of Unix and Linux to administer their own accounts on a network via a Web-based interface, including reading email. The tool isn't included in Unix or Linux distributions by default, but is often used with Webmin, one of the most popular system administration tools, which ships with Linux distributions such as Suse, Mandrake and Gentoo. A separate, less serious bug affects both Webmin and Usermin, researchers said.

    You are not authorised to post comments.

    LinuxSecurity Poll

    Has your email account ever been pwned in a data breach?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 2 answer(s).
    /component/communitypolls/?task=poll.vote
    12
    radio
    [{"id":"53","title":"Yes","votes":"8","type":"x","order":"1","pct":88.89,"resources":[]},{"id":"54","title":"No","votes":"1","type":"x","order":"2","pct":11.11,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.