CVE-2005-3042
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is...
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).
Exploit likelihood
What each source reports
NVD Score used
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).
- Record
CVE-2005-3042- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).
- Record
CVE-2005-3042- Updated
- 2026-11-02
EUVDEUVD-2005-3042 No score
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).
- Record
EUVD-2005-3042- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53wc-rjf9-39m4 No score
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is...
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).
- Record
GHSA-53wc-rjf9-39m4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3042 is a high vulnerability (CVSS 7.5) in Usermin, published September 22, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.13%, the 90th percentile. No source names a fixed version.
References
secunia.com/advisories/16858
gentoo.org/security/en/glsa/glsa-200509-17.xml
osvdb.org/19575
securityreason.com/securityalert/17
securityfocus.com/bid/14889
Show 10 moreShow less
vupen.com/english/advisories/2005/1791
lac.co.jp/business/sns/intelligence/SNSadvisory_e/83_e.html
mandriva.com/security/advisories?name=MDKSA-2005:176
novell.com/linux/security/advisories/2005_24_sr.html
archives.neohapsis.com/archives/bugtraq/2005-09/0257.html
webmin.com/changes-1.230.html
jvn.jp/jp/JVN%2340940493/index.html
nvd.nist.gov/vuln/detail/CVE-2005-3042
github.com/advisories/GHSA-53wc-rjf9-39m4