PT-2002-3072 · Webmin · Webmin

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2360

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Webmin versions 0.21 through 0.99

Description The issue allows remote attackers to read and write to arbitrary files and execute arbitrary commands. This is possible via remote foreign require and remote foreign call requests when the RPC module is installed without root or admin privileges.

Recommendations For Webmin versions 0.21 through 0.99, consider updating the installation to run with proper root or admin privileges to mitigate the risk of exploitation. As a temporary workaround, restrict access to the RPC module until a proper fix is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2002-2360

Produtos afetados

Webmin

Referências · 6

• 🔥 http://securityfocus.com/bid/5591 · Exploit
• 🔥 https://exploit-db.com/exploits/21765 · Exploit
• http://derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2360 · Nota de Segurança
• http://iss.net/security_center/static/9983.php · Nota
• http://securiteam.com/unixfocus/5CP0R1P80G.html · Nota