PT-2003-1367 · Webmin · Usermin+1

Cintia M. Imanishi · Publicado 2003-02-26 · Atualizado 2016-10-18 · CVE-2003-0101

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.070 Usermin versions prior to 1.000

Description The issue arises from the improper handling of metacharacters, such as line feeds and carriage returns (CRLF), in Base-64 encoded strings during Basic authentication. This allows remote attackers to spoof a session ID, potentially leading to the gain of root privileges.

Recommendations For Webmin versions prior to 1.070, update to version 1.070 or later to resolve the issue. For Usermin versions prior to 1.000, update to version 1.000 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2003-0101

DSA-319

Produtos afetados

Usermin

Webmin

Referências · 19

• 🔥 https://exploit-db.com/exploits/22275 · Exploit
• http://debian.org/security/2003/dsa-319 · Aviso do Fabricante
• http://securitytracker.com/id?1006160 · Nota
• http://iss.net/security_center/static/11390.php · Aviso do Fabricante
• http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0008.html · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2003:025 · Aviso do Fabricante
• http://secunia.com/advisories/8163 · Nota
• http://marc.info/?l=bugtraq&m=104610245624895&w=2 · Nota
• http://lac.co.jp/security/english/snsadv_e/62_e.html · Nota
• http://securityfocus.com/bid/6915 · Nota
• http://marc.info/?l=webmin-announce&m=104587858408101&w=2 · Nota
• http://marc.info/?l=bugtraq&m=104610300325629&w=2 · Nota
• http://ciac.org/ciac/bulletins/n-058.shtml · Nota
• http://secunia.com/advisories/8115 · Nota
• http://marc.info/?l=bugtraq&m=104610336226274&w=2 · Nota