Skip to content
OpenAdvisories
Unscored DSA-1199-1 3 CVEs

webmin

Published Oct 23, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 webmin 1.180-3sarge1

Vulnerabilities 3

  • Unscored —
    CVE-2005-3912 EPSS 14%

    Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog…

  • Unscored —
    CVE-2006-3392 Public exploit Scanner template EPSS 79%

    Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote…

  • Unscored —

    Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows r…