Approved changes feed: RSS · Atom

cpe:2.3:a:gentoo:webmin:1.170:r2:*:*:*:*:*:*

part: a version: 1.170 update: r2

VendorGentoo (7fa277de-5a05-5db1-a5d1-2f4db074c494)
ProductWebmin (47ccfb99-e495-5efd-9707-44e022963268)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/dilos/webmin purl2cpe 2026-06-01 10:12:48.596963
pkg:github/webmin/webmin purl2cpe 2026-06-01 10:12:48.596964
pkg:rpm/opensuse/webmin purl2cpe 2026-06-01 10:12:48.596966
pkg:sourceforge/webadmin purl2cpe 2026-06-01 10:12:48.596967

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-0427 vulnerable 2026-06-03 14:26:50.445540 Details available
The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password.
Published: 2005-02-15T05:00:00.000Z
Updated: 2024-08-07T21:13:54.183Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.