Re: Webmin BruteForce + Command execution - By Di42lo <DiAblo_2@012.net.il>

From: Martin Mewes (mm_at_mewes.tv)
Date: 12/23/04

  • Next message: Valdis.Kletnieks_at_vt.edu: "Re: [Full-Disclosure] Re: Linux kernel scm_send local DoS"
    To: bugtraq@securityfocus.com
    Date: Thu, 23 Dec 2004 10:34:59 +0100
    
    

    Hello,

    amit sides <DiAblo_2@012.net.il> wrote :
    > #!/usr/bin/perl
    > ##
    > # Webmin BruteForce + Command execution - By Di42lo
    > <DiAblo_2@012.net.il> #
    > # usage
    > # ./bruteforce.webmin.pl <host> <command>
    [...]

    this is a message from the maintainer ...

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    I haven't seen this one before - but it would be blocked by Webmin's
    password timeouts feature. However, this feature (surprisingly!) isn't
    enabled by default ...
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    On behalf of the maintainer I appreciate every input to secure the
    software to its extend. Future versions of Webmin (if needed Usermin
    too) will have this feature enabled by default.

    With this we encourage everyone using Webmin to enable this feature to
    avoid a possible break-in.

    Again, we would like to tell the OP of this that it would be really nice
    to know first about such issues, so we are ablte to / can do a
    (full-)disclosure on items.
       
       
    bis dahin/kind regards
       
    Martin Mewes - Webmin Translation Team
       

    -- 
    I'm not really out of the office. I'm just ignoring you.
    

  • Next message: Valdis.Kletnieks_at_vt.edu: "Re: [Full-Disclosure] Re: Linux kernel scm_send local DoS"

    Relevant Pages

    • Re: [webmin-l] Re: Webmin BruteForce + Command execution - By Di42lo <DiAblo_2@012.net.il>
      ... > this is a message from the maintainer ... ... However, this feature isn't ... Future versions of Webmin (if needed Usermin ... - Select 'Enable password timeouts'. ...
      (Bugtraq)
    • Re: webmail in FC3
      ... On Thu, 2005-07-07 at 08:46, Kanwar Ranbir Sandhu wrote: ... There is also one included in the usermin part of webmin. ... feature is that it already uses pam for login/password checking so ...
      (Fedora)
    • Re: Order of globbing result in bash, bug or feature?
      ... > language sort order should affect '_' in any case. ... Ask the maintainer of that locale (in general you might ... consider LC_COLLATE a feature as well if you needed it). ...
      (comp.unix.shell)
    • Re: webmail in FC3
      ... > There is also one included in the usermin part of webmin. ... > feature is that it already uses pam for login/password checking so ... even if it's just for normal users. ... Kanwar Ranbir Sandhu ...
      (Fedora)
    • Re: vim auto brace matching?
      ... though only a few months ago its maintainer sent me email discussing his ... reluctance to adopt the feature. ...
      (comp.editors)