a version of Webmin has an error which allows users to both guess the valid usernames and attempt brute force password attacks against machines running webmin.