Mandrake Linux Security Advisory : webmin (MDKSA-2002:033)
High Nessus Plugin ID 13939
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionA vulnerability exists in all versions of Webmin prior to 0.970 that allows a remote attacker to login to Webmin as any user. All users of Webmin are encouraged to upgrade immediately.
Users of Mandrake Linux 8.0 and earlier will need to install some additional perl modules for this new version of webmin to work correctly.
SolutionUpdate the affected perl-Authen-PAM, perl-Net_SSLeay and / or webmin packages.