Mandrake Linux Security Advisory : webmin (MDKSA-2004:101)
Low Nessus Plugin ID 14795
SynopsisThe remote Mandrake Linux host is missing a security update.
DescriptionA vulnerability in webmin was discovered by Ludwig Nussel. A temporary directory was used in webmin, however it did not check for the previous owner of the directory. This could allow an attacker to create the directory and place dangerous symbolic links inside.
The updated packages are patched to prevent this problem.
SolutionUpdate the affected webmin package.