full-disclosure - re: webmin remote format string bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu Dec  1 21:10:43 2005
From: dave at immunitysec.com (Dave Aitel)
Subject: re: webmin remote format string bug

This is exploitable - Immunity has a PoC exploit in our Partner's 
section written by Bas Alberts.

Thanks,
Dave Aitel
Immunity, Inc.


craig@...enet.de wrote:
> Hello!
> I succeeded in crashing webmin 1.230 with:
>
> username %n
> password aaaa
>
> after klicking 4 times on "Login" webmin was dead.
> There were no logs at all, and no error was shown in the web interface...
> Any idea if it's really exploitable (executing code I mean)? Is anyone working on a POC?
>
> giarc@...eet.de
>
>
>
>   
>
>