Webmin Server Detection (deprecated)

low Nessus Network Monitor Plugin ID 1452

Synopsis

The remote host is running an inherently insecure protocol or application.

Description

A Webmin server is running on this port in clear text. As webmin is a web interface to configure Unix systems, you should not let unciphered communication to be established on this service, as an attacker may sniff Webmin sessions and reuse the user passwords to take the control of this host.

Solution

Force the use of SSL in the webmin configuration file.

See Also

http://www.webmin.net

Plugin Details

Severity: Low

ID: 1452

Family: Web Servers

Published: 8/20/2004

Updated: 1/15/2016

Nessus ID: 10757

Vulnerability Information

CPE: cpe:/a:gentoo:webmin