CVE-2005-3912: debian debian_linux
Vulnerability summary
CVE-2005-3912 is a high (CVSS 7.5) vulnerability in debian debian_linux. EPSS estimates a 14.48% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 30-11-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, allows remote attackers to cause a denial of service (crash or memory consumption) and possibly execute arbitrary code via format string specifiers in the username parameter to the login form, which is ultimately used in a syslog call. NOTE: the code execution might be associated with an issue in Perl.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
14.48%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 14.48% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- debian_linuxEOL3.1
Webmin1 product
- webmin≥ 1.100, < 1.180 | ≥ 1.200, < 1.250
2 vendors · 2 products
References
17 links- www.gentoo.org/security/en/glsa/glsa-200512-02.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
- lists.immunitysec.com/pipermail/dailydave/2005-November/002685.htmlMailing ListX Refsource MLISTPatchThird Party Advisory
- www.novell.com/linux/security/advisories/2005_30_sr.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
Show all 17 references
- www.securityfocus.com/archive/1/418093/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- www.mandriva.com/security/advisories?name=MDKSA-2005:223Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory