SNS Advisory No.88
Webmin Directory Traversal Vulnerability
Discovered on:04 Jun 2006
Released on:23 Jun 2006
Severity Level:
Medium
Overview:
Webmin for Windows contains directory traversal vulnerability that allows remote attackers to download arbitrary files without authentication.
Description:
Webmin is a web-based system administration tool for Unix, MacOS X and Windows platform.
Webmin 1.270 and earlier versions does not properly handle "\" (backslash). On Windows platform, this allows attackers to access outside of the public directory and files.
In default configurations of Webmin, it is required authentication to access almost directories under top page. But there are some directories where is not required authentication to access. For example, the directory which stores the image used before login.
Therefore, by exploiting directory traversal vulnerability from these directories, the vulnerability allows remote attackers to download the contents of arbitrary files without authentication.
Affected Products and Versions:
Webmin (on Windows) Version 1.270 and earlier versions
Solution:
This problem can be addressed by upgrading Webmin to 1.280 or later.
Discovered by:
Keigo Yamazaki (LAC)
Thanks to:
This LAC Advisory is released in coordination with Information-technology Promotion Agency, Japan (IPA) and Japan Computer Emargency Response Team Coordination Center (JPCERT/CC.)
Disclaimer:
The information contained in this advisory may be revised without prior notice and is provided as is. Users shall take their own risk when taking any actions following reading this advisory. Little eArth Corporation Co., Ltd. shall not be held responsible for any claims, losses or damages caused by the use of information provided here.
This advisory is available at the following URL:
http://www.lac.co.jp/english/advisory/88_e.html
Reference
Category Menu
