Test ID:	1.3.6.1.4.1.25623.1.0.55435
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200509-17 (Webmin Usermin)
Summary:	The remote host is missing updates announced in;advisory GLSA 200509-17.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200509-17. Vulnerability Insight: If Webmin or Usermin is configured to use full PAM conversations, it is vulnerable to the remote execution of arbitrary code with root privileges. Solution: All Webmin users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-admin/webmin-1.230' All Usermin users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-admin/usermin-1.160' CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3042 BugTraq ID: 14889 http://www.securityfocus.com/bid/14889 Bugtraq: 20050921 [SNS Advisory No.83] Webmin/Usermin PAM Authentication Bypass Vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2005-09/0257.html http://www.gentoo.org/security/en/glsa/glsa-200509-17.xml http://jvn.jp/jp/JVN%2340940493/index.html http://www.mandriva.com/security/advisories?name=MDKSA-2005:176 http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/83_e.html http://www.osvdb.org/19575 http://secunia.com/advisories/16858 http://secunia.com/advisories/17282 http://securityreason.com/securityalert/17 SuSE Security Announcement: SUSE-SR:2005:024 (Google Search) http://www.novell.com/linux/security/advisories/2005_24_sr.html http://www.vupen.com/english/advisories/2005/1791
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.