This script is Copyright (C) 2006-2015 Tenable Network Security, Inc.
The remote Mandrake Linux host is missing a security update.
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path
function before decoding HTML, which allows remote attackers to read
arbitrary files. NOTE: This is a different issue than CVE-2006-3274.
Updated packages have been patched to correct this issue.
Update the affected webmin package.
Risk factor :
Medium / CVSS Base Score : 5.0