## Description

Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### webmin - webmin

Affected Versions:

- 0.1

### webmin - webmin

Affected Versions:

- 0.2

### webmin - webmin

Affected Versions:

- 0.3

### webmin - webmin

Affected Versions:

- 0.4

### webmin - webmin

Affected Versions:

- 0.21

### webmin - webmin

Affected Versions:

- 0.22

### webmin - webmin

Affected Versions:

- 0.31

### webmin - webmin

Affected Versions:

- 0.41

### webmin - webmin

Affected Versions:

- 0.42

## References

- http://www.securityfocus.com/archive/1/9138
  Patch Vendor Advisory
- http://www.securityfocus.com/bid/98
- http://www.webmin.com/webmin/changes.html
  Vendor Advisory
- http://www.securityfocus.com/archive/1/9138
  Patch Vendor Advisory
- http://www.securityfocus.com/bid/98
- http://www.webmin.com/webmin/changes.html
  Vendor Advisory

Neural Processor Active