Vulnerability-Lookup

CVE-2006-3392 (GCVE-0-2006-3392)

Vulnerability from cvelistv5 – Published: 2006-07-06 20:00 – Updated: 2024-08-07 18:30

Summary

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from the filename. NOTE: This is a different issue than CVE-2006-3274.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2334 records in the last 180 days details

References

18 references

URL	Tags
http://secunia.com/advisories/21365	third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200608-11.xml	vendor-advisoryx_refsource_GENTOO
http://www.webmin.com/changes.html	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/440125/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/21105	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/18744	vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/440493/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/440466/100…	mailing-listx_refsource_BUGTRAQ
http://www.kb.cert.org/vuls/id/999601	third-party-advisoryx_refsource_CERT-VN
http://www.debian.org/security/2006/dsa-1199	vendor-advisoryx_refsource_DEBIAN
http://attrition.org/pipermail/vim/2006-June/0009…	mailing-listx_refsource_VIM
http://secunia.com/advisories/20892	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2006/2612	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/439653/100…	mailing-listx_refsource_BUGTRAQ
http://www.osvdb.org/26772	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/22556	third-party-advisoryx_refsource_SECUNIA
http://attrition.org/pipermail/vim/2006-July/0009…	mailing-listx_refsource_VIM

Date Public

2006-06-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:32.634Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "21365",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21365"
          },
          {
            "name": "GLSA-200608-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.webmin.com/changes.html"
          },
          {
            "name": "20060710 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
          },
          {
            "name": "21105",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21105"
          },
          {
            "name": "18744",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/18744"
          },
          {
            "name": "20060715 Webmin / Usermin Arbitrary File Disclosure Vulnerability Perl",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
          },
          {
            "name": "20060715 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
          },
          {
            "name": "VU#999601",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/999601"
          },
          {
            "name": "DSA-1199",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1199"
          },
          {
            "name": "20060630 Webmin traversal - changelog",
            "tags": [
              "mailing-list",
              "x_refsource_VIM",
              "x_transferred"
            ],
            "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
          },
          {
            "name": "20892",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20892"
          },
          {
            "name": "MDKSA-2006:125",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
          },
          {
            "name": "ADV-2006-2612",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2612"
          },
          {
            "name": "20060709 Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
          },
          {
            "name": "26772",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/26772"
          },
          {
            "name": "22556",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22556"
          },
          {
            "name": "20060711 Re: Webmin traversal - changelog",
            "tags": [
              "mailing-list",
              "x_refsource_VIM",
              "x_transferred"
            ],
            "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-06-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "21365",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21365"
        },
        {
          "name": "GLSA-200608-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.webmin.com/changes.html"
        },
        {
          "name": "20060710 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
        },
        {
          "name": "21105",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21105"
        },
        {
          "name": "18744",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/18744"
        },
        {
          "name": "20060715 Webmin / Usermin Arbitrary File Disclosure Vulnerability Perl",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
        },
        {
          "name": "20060715 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
        },
        {
          "name": "VU#999601",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/999601"
        },
        {
          "name": "DSA-1199",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1199"
        },
        {
          "name": "20060630 Webmin traversal - changelog",
          "tags": [
            "mailing-list",
            "x_refsource_VIM"
          ],
          "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
        },
        {
          "name": "20892",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20892"
        },
        {
          "name": "MDKSA-2006:125",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
        },
        {
          "name": "ADV-2006-2612",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2612"
        },
        {
          "name": "20060709 Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
        },
        {
          "name": "26772",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/26772"
        },
        {
          "name": "22556",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22556"
        },
        {
          "name": "20060711 Re: Webmin traversal - changelog",
          "tags": [
            "mailing-list",
            "x_refsource_VIM"
          ],
          "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3392",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "21365",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21365"
            },
            {
              "name": "GLSA-200608-11",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
            },
            {
              "name": "http://www.webmin.com/changes.html",
              "refsource": "CONFIRM",
              "url": "http://www.webmin.com/changes.html"
            },
            {
              "name": "20060710 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
            },
            {
              "name": "21105",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21105"
            },
            {
              "name": "18744",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/18744"
            },
            {
              "name": "20060715 Webmin / Usermin Arbitrary File Disclosure Vulnerability Perl",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
            },
            {
              "name": "20060715 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
            },
            {
              "name": "VU#999601",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/999601"
            },
            {
              "name": "DSA-1199",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1199"
            },
            {
              "name": "20060630 Webmin traversal - changelog",
              "refsource": "VIM",
              "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
            },
            {
              "name": "20892",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20892"
            },
            {
              "name": "MDKSA-2006:125",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
            },
            {
              "name": "ADV-2006-2612",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2612"
            },
            {
              "name": "20060709 Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
            },
            {
              "name": "26772",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/26772"
            },
            {
              "name": "22556",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22556"
            },
            {
              "name": "20060711 Re: Webmin traversal - changelog",
              "refsource": "VIM",
              "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3392",
    "datePublished": "2006-07-06T20:00:00.000Z",
    "dateReserved": "2006-07-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T18:30:32.634Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2006-3392",
      "date": "2026-10-21",
      "epss": "0.79489",
      "percentile": "0.99604"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:usermin:usermin:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "26B92F53-3598-44F5-8CE1-A04A28EFF92E",
                    "versionEndIncluding": "1.210",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3A061012-19EE-4A9E-9AFC-75DF24D316C5",
                    "versionEndIncluding": "1.2.80",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274."
          },
          {
            "lang": "es",
            "value": "Las aplicaciones Webmin antes de su versi\u00f3n 1.290 y Usermin antes de la 1.220 llaman a la funci\u00f3n simplify_path antes de decodificar HTML, lo que permite a atacantes remotos leer ficheros arbitrarios, como se ha demostrado utilizando secuencias \"..% 01\", evitando de esta manera la supresi\u00f3n del nombre de fichero de las secuencias \"../\" anteriores a octetos del estilo de \"%01\". NOTA: Se trata de una vulnerabilidad diferente a CVE-2006-3274."
          }
        ],
        "id": "CVE-2006-3392",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2006-07-06T20:05:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/20892"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21105"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21365"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/22556"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2006/dsa-1199"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/999601"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://www.osvdb.org/26772"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/18744"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2612"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.webmin.com/changes.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/20892"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21105"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/21365"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/22556"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2006/dsa-1199"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/999601"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.osvdb.org/26772"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/18744"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2612"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.webmin.com/changes.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTA-2006-AVI-337

Vulnerability from certfr_avis - Published: 2006-08-06 - Updated: 2006-08-06

Une vulnérabilité découverte dans les applications Webmin et Usermin permet à un utilisateur mal intentionné de porter atteinte à la confidentialité des données présentes sur le système.

Description

Cette vulnérabilité est causée par une erreur dans le traitement des adresses réticulaires (URL). Un individu malveillant peut exploiter cette vulnérabilité au moyen d'une adresse réticulaire spécialement conçue pour ensuite accéder en lecture aux fichiers présents sur le système.

Solution

Appliquer la mise à jour de sécurité Webmin en passant à la version 1.290 disponible à l'adresse :

http://www.webmin.com

Appliquer la mise à jour de sécurité Usermin en passant à la version 1.220 disponible à l'adresse :

http://www.webmin.com/index6.html

None

Impacted products

	Vendor	Product	Description
	N/A	N/A	Usermin 1.210 et versions antérieures.
	N/A	N/A	Webmin 1.280 et versions antérieures ;

References

Title

Publication Time

FKIE_CVE-2006-3392

Vulnerability from fkie_nvd - Published: 2006-07-06 20:05 - Updated: 2026-06-16 22:26

Severity

Summary

References

URL	Tags
cve@mitre.org	http://attrition.org/pipermail/vim/2006-July/000923.html
cve@mitre.org	http://attrition.org/pipermail/vim/2006-June/000912.html
cve@mitre.org	http://secunia.com/advisories/20892	Patch, Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/21105	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/21365	Patch, Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/22556	Vendor Advisory
cve@mitre.org	http://security.gentoo.org/glsa/glsa-200608-11.xml
cve@mitre.org	http://www.debian.org/security/2006/dsa-1199
cve@mitre.org	http://www.kb.cert.org/vuls/id/999601	US Government Resource
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDKSA-2006:125
cve@mitre.org	http://www.osvdb.org/26772	Patch
cve@mitre.org	http://www.securityfocus.com/archive/1/439653/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/archive/1/440125/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/archive/1/440466/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/archive/1/440493/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/bid/18744
cve@mitre.org	http://www.vupen.com/english/advisories/2006/2612	Vendor Advisory
cve@mitre.org	http://www.webmin.com/changes.html
af854a3a-2127-422b-91ae-364da2661108	http://attrition.org/pipermail/vim/2006-July/000923.html
af854a3a-2127-422b-91ae-364da2661108	http://attrition.org/pipermail/vim/2006-June/000912.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/20892	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21105	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21365	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/22556	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://security.gentoo.org/glsa/glsa-200608-11.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-1199
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/999601	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2006:125
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/26772	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/439653/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/440125/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/440466/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/440493/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/18744
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/2612	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.webmin.com/changes.html

Impacted products

	Vendor	Product	Version
	usermin	usermin	*
	webmin	webmin	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:usermin:usermin:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "26B92F53-3598-44F5-8CE1-A04A28EFF92E",
              "versionEndIncluding": "1.210",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A061012-19EE-4A9E-9AFC-75DF24D316C5",
              "versionEndIncluding": "1.2.80",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274."
    },
    {
      "lang": "es",
      "value": "Las aplicaciones Webmin antes de su versi\u00f3n 1.290 y Usermin antes de la 1.220 llaman a la funci\u00f3n simplify_path antes de decodificar HTML, lo que permite a atacantes remotos leer ficheros arbitrarios, como se ha demostrado utilizando secuencias \"..% 01\", evitando de esta manera la supresi\u00f3n del nombre de fichero de las secuencias \"../\" anteriores a octetos del estilo de \"%01\". NOTA: Se trata de una vulnerabilidad diferente a CVE-2006-3274."
    }
  ],
  "id": "CVE-2006-3392",
  "lastModified": "2026-06-16T22:26:58.387",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-07-06T20:05:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20892"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21105"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21365"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/22556"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2006/dsa-1199"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/999601"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.osvdb.org/26772"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/18744"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/2612"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.webmin.com/changes.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20892"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21105"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21365"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/22556"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1199"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/999601"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.osvdb.org/26772"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/18744"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/2612"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.webmin.com/changes.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-W4WX-R2H6-P94Q

Vulnerability from github – Published: 2022-05-01 07:08 – Updated: 2022-05-01 07:08

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-3392"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-07-06T20:05:00Z",
    "severity": "MODERATE"
  },
  "details": "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274.",
  "id": "GHSA-w4wx-r2h6-p94q",
  "modified": "2022-05-01T07:08:28Z",
  "published": "2022-05-01T07:08:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3392"
    },
    {
      "type": "WEB",
      "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
    },
    {
      "type": "WEB",
      "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20892"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21105"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21365"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/22556"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-1199"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/999601"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/26772"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/18744"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/2612"
    },
    {
      "type": "WEB",
      "url": "http://www.webmin.com/changes.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2006-3392

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2006-3392

Aliases

CVE-2006-3392

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2006-3392",
    "description": "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274.",
    "id": "GSD-2006-3392",
    "references": [
      "https://www.debian.org/security/2006/dsa-1199"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-3392"
      ],
      "details": "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274.",
      "id": "GSD-2006-3392",
      "modified": "2023-12-13T01:19:57.843199Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2006-3392",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "21365",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21365"
          },
          {
            "name": "GLSA-200608-11",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
          },
          {
            "name": "http://www.webmin.com/changes.html",
            "refsource": "CONFIRM",
            "url": "http://www.webmin.com/changes.html"
          },
          {
            "name": "20060710 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
          },
          {
            "name": "21105",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/21105"
          },
          {
            "name": "18744",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/18744"
          },
          {
            "name": "20060715 Webmin / Usermin Arbitrary File Disclosure Vulnerability Perl",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
          },
          {
            "name": "20060715 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
          },
          {
            "name": "VU#999601",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/999601"
          },
          {
            "name": "DSA-1199",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2006/dsa-1199"
          },
          {
            "name": "20060630 Webmin traversal - changelog",
            "refsource": "VIM",
            "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
          },
          {
            "name": "20892",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/20892"
          },
          {
            "name": "MDKSA-2006:125",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
          },
          {
            "name": "ADV-2006-2612",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/2612"
          },
          {
            "name": "20060709 Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
          },
          {
            "name": "26772",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/26772"
          },
          {
            "name": "22556",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/22556"
          },
          {
            "name": "20060711 Re: Webmin traversal - changelog",
            "refsource": "VIM",
            "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.2.80",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:usermin:usermin:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.210",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3392"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using \"..%01\" sequences, which bypass the removal of \"../\" sequences before bytes such as \"%01\" are removed from the filename.  NOTE: This is a different issue than CVE-2006-3274."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20060630 Webmin traversal - changelog",
              "refsource": "VIM",
              "tags": [],
              "url": "http://attrition.org/pipermail/vim/2006-June/000912.html"
            },
            {
              "name": "http://www.webmin.com/changes.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.webmin.com/changes.html"
            },
            {
              "name": "26772",
              "refsource": "OSVDB",
              "tags": [
                "Patch"
              ],
              "url": "http://www.osvdb.org/26772"
            },
            {
              "name": "20892",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/20892"
            },
            {
              "name": "VU#999601",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/999601"
            },
            {
              "name": "20060711 Re: Webmin traversal - changelog",
              "refsource": "VIM",
              "tags": [],
              "url": "http://attrition.org/pipermail/vim/2006-July/000923.html"
            },
            {
              "name": "18744",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/18744"
            },
            {
              "name": "21105",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/21105"
            },
            {
              "name": "GLSA-200608-11",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200608-11.xml"
            },
            {
              "name": "21365",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/21365"
            },
            {
              "name": "DSA-1199",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-1199"
            },
            {
              "name": "22556",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/22556"
            },
            {
              "name": "20060715 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/440466/100/0/threaded"
            },
            {
              "name": "MDKSA-2006:125",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:125"
            },
            {
              "name": "ADV-2006-2612",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/2612"
            },
            {
              "name": "20060715 Webmin / Usermin Arbitrary File Disclosure Vulnerability Perl",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/440493/100/0/threaded"
            },
            {
              "name": "20060710 Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/440125/100/0/threaded"
            },
            {
              "name": "20060709 Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/439653/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-18T16:47Z",
      "publishedDate": "2006-07-06T20:05Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2006-3392 (GCVE-0-2006-3392)

CERTA-2006-AVI-337

Description

Solution

FKIE_CVE-2006-3392

GHSA-W4WX-R2H6-P94Q

GSD-2006-3392

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour