CVE:CVE-2012-2982
CNNVD:CNNVD-201209-215
Webmin是澳大利亚软件开发者Jamie Cameron和Webmin社区共同开发的一套基于Web的用于类Unix操作系统中的系统管理工具。
Webmin 1.590版本和较早版本中的file/show.cgi中存在漏洞。远程认证用户可利用该漏洞通过路径名中的无效字符如‘|’(竖线)字符，执行任意命令。
solution:Upgrade gentoo webmin to a higher version than 1.590,1.140,1.150,1.160,1.170,1.180,1.200,1.210,1.220,1.230,1.240,1.260,1.270,1.280,1.290,1.300,1.310,1.320,1.330,1.340,1.370,1.380,1.390,1.400,1.410,1.420,1.430,1.440,1.450,1.470,1.480,1.500,1.510,1.520,1.530,1.550,1.560,1.570,1.580,and avoid the version (,1.590],1.140,1.150,1.160,1.170,1.180,1.200,1.210,1.220,1.230,1.240,1.260,1.270,1.280,1.290,1.300,1.310,1.320,1.330,1.340,1.370,1.380,1.390,1.400,1.410,1.420,1.430,1.440,1.450,1.470,1.480,1.500,1.510,1.520,1.530,1.550,1.560,1.570,1.580