CVE-2005-0427

The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password.

• http://bugs.gentoo.org/show_bug.cgi?id=77731Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200502-12.xmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19315
• http://bugs.gentoo.org/show_bug.cgi?id=77731Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200502-12.xmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19315

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0421DelphiTurk FTP 1.0 stores usernames and passwords in the pro…
• CVE-2005-0422DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores use…
• CVE-2005-0423SQL injection vulnerability in login.asp in ASPjar Guestbook…
• CVE-2005-0424Unknown vulnerability in the delete.asp program in certain v…
• CVE-2005-0425Unknown vulnerability in IBM Websphere Application Server 5.…
• CVE-2005-0426Unknown vulnerability in Solaris 8 and 9 allows remote attac…
• CVE-2005-0428The DNSPacket::expand method in dnspacket.cc in PowerDNS bef…
• CVE-2005-0429Direct code injection vulnerability in forumdisplay.php in v…
• CVE-2005-0430The Quake 3 engine, as used in multiple game packages, allow…
• CVE-2005-0431Barracuda Spam Firewall 3.1.10 and earlier does not restrict…
• CVE-2005-0432BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 …
• CVE-2005-0433Php-Nuke 7.5 allows remote attackers to determine the full p…