CVE-2004-0583

CVE-2004-0583 describes a vulnerability in Webmin 1.140 and Usermin 1.070 where the account lockout mechanism fails to properly parse specific character strings. This flaw enables remote attackers to bypass lockout protections and conduct brute-force attacks to guess user credentials. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity, requiring no authentication, and potentially leading to information disclosure (C:P). There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.