Test ID:	1.3.6.1.4.1.25623.1.0.57133
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2006:125 (webmin)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to webmin announced via advisory MDKSA-2006:125. Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files. NOTE: This is a different issue than CVE-2006-3274. Updated packages have been patched to correct this issue. Affected: 2006.0, Corporate 3.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2006:125 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3274 BugTraq ID: 18613 http://www.securityfocus.com/bid/18613 Bugtraq: 20060623 [SNS Advisory No.88] Webmin Directory Traversal Vulnerability (Google Search) http://www.securityfocus.com/archive/1/438149/100/0/threaded http://jvn.jp/jp/JVN%2367974490/index.html http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html http://securitytracker.com/id?1016375 http://secunia.com/advisories/20777 http://securityreason.com/securityalert/1161 http://www.vupen.com/english/advisories/2006/2493 XForce ISS Database: webmin-backslash-directory-traversal(27366) https://exchange.xforce.ibmcloud.com/vulnerabilities/27366 Common Vulnerability Exposure (CVE) ID: CVE-2006-3292 BugTraq ID: 18665 http://www.securityfocus.com/bid/18665 Bugtraq: 20060626 Jaws <= 0.6.2 'Search gadget' SQL injection (Google Search) http://www.securityfocus.com/archive/1/438434/100/0/threaded http://retrogod.altervista.org/JAWS_062_sql.html http://secunia.com/advisories/20842 http://securityreason.com/securityalert/1165 http://www.vupen.com/english/advisories/2006/2546 XForce ISS Database: jaws-search-gadget-sql-injection(27334) https://exchange.xforce.ibmcloud.com/vulnerabilities/27334
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.