Read the docs
TI-2006-04101 Aliases CVE-2006-4246GHSA-4qxm-xm9h-rhmg

Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly…

Priority LOW 19Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user.

Why it matters now

EPSS 0.00884 59th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 32

CPEVersionsRoleVendor
cpe:2.3:a:usermin:usermin:*:*:*:*:*:*:*:*up to 1.210VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.4:*:*:*:*:*:*:*0.4VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.5:*:*:*:*:*:*:*0.5VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.6:*:*:*:*:*:*:*0.6VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:*0.7VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.8:*:*:*:*:*:*:*0.8VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.9:*:*:*:*:*:*:*0.9VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.91:*:*:*:*:*:*:*0.91VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.92:*:*:*:*:*:*:*0.92VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.93:*:*:*:*:*:*:*0.93VulnerableUsermin
  • cpe:2.3:a:usermin:usermin:*:*:*:*:*:*:*:* Versions up to 1.210 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.4:*:*:*:*:*:*:* Versions 0.4 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.5:*:*:*:*:*:*:* Versions 0.5 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.6:*:*:*:*:*:*:* Versions 0.6 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:* Versions 0.7 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.8:*:*:*:*:*:*:* Versions 0.8 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.9:*:*:*:*:*:*:* Versions 0.9 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.91:*:*:*:*:*:*:* Versions 0.91 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.92:*:*:*:*:*:*:* Versions 0.92 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.93:*:*:*:*:*:*:* Versions 0.93 Vulnerable ·Usermin
Show 22 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:usermin:usermin:0.94:*:*:*:*:*:*:*0.94VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.95:*:*:*:*:*:*:*0.95VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.96:*:*:*:*:*:*:*0.96VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.97:*:*:*:*:*:*:*0.97VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.98:*:*:*:*:*:*:*0.98VulnerableUsermin
cpe:2.3:a:usermin:usermin:0.99:*:*:*:*:*:*:*0.99VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.000:*:*:*:*:*:*:*1.000VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.010:*:*:*:*:*:*:*1.010VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.020:*:*:*:*:*:*:*1.020VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.030:*:*:*:*:*:*:*1.030VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.040:*:*:*:*:*:*:*1.040VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.051:*:*:*:*:*:*:*1.051VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.060:*:*:*:*:*:*:*1.060VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:*1.070VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.080:*:*:*:*:*:*:*1.080VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.090:*:*:*:*:*:*:*1.090VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.100:*:*:*:*:*:*:*1.100VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.110:*:*:*:*:*:*:*1.110VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.120:*:*:*:*:*:*:*1.120VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.130:*:*:*:*:*:*:*1.130VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.140:*:*:*:*:*:*:*1.140VulnerableUsermin
cpe:2.3:a:usermin:usermin:1.150:*:*:*:*:*:*:*1.150VulnerableUsermin
  • cpe:2.3:a:usermin:usermin:0.94:*:*:*:*:*:*:* Versions 0.94 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.95:*:*:*:*:*:*:* Versions 0.95 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.96:*:*:*:*:*:*:* Versions 0.96 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.97:*:*:*:*:*:*:* Versions 0.97 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.98:*:*:*:*:*:*:* Versions 0.98 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:0.99:*:*:*:*:*:*:* Versions 0.99 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.000:*:*:*:*:*:*:* Versions 1.000 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.010:*:*:*:*:*:*:* Versions 1.010 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.020:*:*:*:*:*:*:* Versions 1.020 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.030:*:*:*:*:*:*:* Versions 1.030 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.040:*:*:*:*:*:*:* Versions 1.040 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.051:*:*:*:*:*:*:* Versions 1.051 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.060:*:*:*:*:*:*:* Versions 1.060 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:* Versions 1.070 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.080:*:*:*:*:*:*:* Versions 1.080 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.090:*:*:*:*:*:*:* Versions 1.090 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.100:*:*:*:*:*:*:* Versions 1.100 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.110:*:*:*:*:*:*:* Versions 1.110 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.120:*:*:*:*:*:*:* Versions 1.120 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.130:*:*:*:*:*:*:* Versions 1.130 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.140:*:*:*:*:*:*:* Versions 1.140 Vulnerable ·Usermin
  • cpe:2.3:a:usermin:usermin:1.150:*:*:*:*:*:*:* Versions 1.150 Vulnerable ·Usermin

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-4246
  2. 2026-10-03 Alias added: GHSA-4qxm-xm9h-rhmg

References

Patch 3

Other 2

  • TI-2006-03290 Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before… CVSS 2.0MEDIUM 5.0
  • TI-2003-00096 miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly… CVSS 2.0HIGH 10.0
  • TI-2005-01115 Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change… CVSS 2.0HIGH 10.0
  • TI-2005-02873 miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM… CVSS 2.0HIGH 7.5
  • TI-2004-01345 The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to… CVSS 2.0HIGH 7.5
  • TI-2002-00734 (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and… CVSS 2.0HIGH 7.5
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences