PT-2002-2913 · Webmin · Webmin

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2201

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Webmin versions 0.990 and earlier

Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name variable. This is related to the Printer Administration module.

Recommendations: For Webmin versions 0.990 and earlier, consider disabling the Printer Administration module until a patch is available to prevent exploitation. Restrict access to the module to minimize the risk of arbitrary command execution. Avoid using shell metacharacters in the printer name variable.

Fix

Related Identifiers

CVE-2002-2201

Affected Products

Webmin

References · 4

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-2201 · Security Note
• http://webmin.com/updates.html · Note
• http://iss.net/security_center/static/10052.php · Note