PT-2002-1777 · Webmin+1 · Webmin+1

Published 2002-07-26 · Updated 2008-09-05 · CVE-2002-0756

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Webmin version 0.96 Usermin version 0.90

Description A cross-site scripting issue exists in the authentication page, allowing remote attackers to insert script into an error page, which could potentially lead to cookie theft.

Recommendations For Webmin version 0.96, update to a version that fixes this issue. For Usermin version 0.90, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the authentication page to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0756

Affected Products

Usermin

Webmin

References · 4

• http://securityfocus.com/bid/4694 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0040.html · Vendor Advisory
• http://iss.net/security_center/static/9036.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0756 · Security Note