CVE-2004-0583: Debian Linux

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.

Affected products

• Debian Debian Linux: version 3.0 only
• Usermin Usermin: version 1.070 only
• Webmin Webmin: version 1.1.40 only

Published 2004-08-06. Last modified 2026-06-16.