CVE-1999-1074
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid...
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
Exploit likelihood
What each source reports
NVD Score used
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
- Record
CVE-1999-1074- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
- Record
CVE-1999-1074- Updated
- 2026-11-02
EUVDEUVD-1999-1055 No score
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
- Record
EUVD-1999-1055- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gwfg-h74f-g6gq No score
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid...
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.
- Record
GHSA-gwfg-h74f-g6gq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-1074 is a high vulnerability (CVSS 7.5) in Webmin, published December 31, 1999. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.57%, the 75th percentile. No source names a fixed version.