CVE-2004-0559

Published: Oct 20, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.

Affected (28)

Products: Usermin: Usermin · Webmin: Webmin · Mandrakesoft: Mandrake Linux, Mandrake Linux Corporate Server

1 product

1 product

2 products

Mandrake Linux Corporate Server

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Usermin Usermin	Version 1.000
Usermin Usermin	Version 1.010
Usermin Usermin	Version 1.020
Usermin Usermin	Version 1.030
Usermin Usermin	Version 1.040
Usermin Usermin	Version 1.051
Usermin Usermin	Version 1.060
Usermin Usermin	Version 1.070
Usermin Usermin	Version 1.080
Webmin Webmin	Version 1.0.00
Webmin Webmin	Version 1.0.20
Webmin Webmin	Version 1.0.50
Webmin Webmin	Version 1.0.60
Webmin Webmin	Version 1.0.70
Webmin Webmin	Version 1.0.80
Webmin Webmin	Version 1.0.90
Webmin Webmin	Version 1.1.00
Webmin Webmin	Version 1.1.10
Webmin Webmin	Version 1.1.21
Webmin Webmin	Version 1.1.30
Webmin Webmin	Version 1.1.40
Webmin Webmin	Version 1.1.50

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 9.2
Mandrakesoft Mandrake Linux	Version 9.2
Mandrakesoft Mandrake Linux Corporate Server	Version 2.1
Mandrakesoft Mandrake Linux Corporate Server	Version 2.1