Test ID:	1.3.6.1.4.1.25623.1.1.10.2019.0237
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2019-0237)
Summary:	The remote host is missing an update for the 'webmin' package(s) announced via the MGASA-2019-0237 advisory.
Description:	Summary: The remote host is missing an update for the 'webmin' package(s) announced via the MGASA-2019-0237 advisory. Vulnerability Insight: Updated webmin package fixes security vulnerability: Webmin before 1.930 allows remote exploits if the option to change expired passwords is enabled (CVE-2019-15107). Note that it is only vulnerable if changing of expired passwords is enabled, which is not the case by default. Affected Software/OS: 'webmin' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-15107 http://packetstormsecurity.com/files/154141/Webmin-1.920-Remote-Command-Execution.html http://packetstormsecurity.com/files/154141/Webmin-Remote-Comman-Execution.html http://packetstormsecurity.com/files/154197/Webmin-1.920-password_change.cgi-Backdoor.html http://packetstormsecurity.com/files/154485/Webmin-1.920-Remote-Code-Execution.html http://www.pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html http://www.webmin.com/security.html https://attackerkb.com/topics/hxx3zmiCkR/webmin-password-change-cgi-command-injection https://www.exploit-db.com/exploits/47230
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.