PT-2002-1777 · Webmin+1 · Webmin+1

Publicado 2002-07-26 · Atualizado 2008-09-05 · CVE-2002-0756

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Webmin version 0.96 Usermin version 0.90

Description A cross-site scripting issue exists in the authentication page, allowing remote attackers to insert script into an error page, which could potentially lead to cookie theft.

Recommendations For Webmin version 0.96, update to a version that fixes this issue. For Usermin version 0.90, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the authentication page to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0756

Produtos afetados

Usermin

Webmin

Referências · 4

• http://securityfocus.com/bid/4694 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0040.html · Aviso do Fabricante
• http://iss.net/security_center/static/9036.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0756 · Nota de Segurança