PT-2002-2913 · Webmin · Webmin

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2201

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Webmin versions 0.990 and earlier

Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name variable. This is related to the Printer Administration module.

Recommendations: For Webmin versions 0.990 and earlier, consider disabling the Printer Administration module until a patch is available to prevent exploitation. Restrict access to the module to minimize the risk of arbitrary command execution. Avoid using shell metacharacters in the printer name variable.

Correção

Identificadores relacionados

CVE-2002-2201

Produtos afetados

Webmin

Referências · 4

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc · Aviso do Fabricante
• http://webmin.com/updates.html · Nota
• http://iss.net/security_center/static/10052.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2201 · Nota de Segurança