PT-2002-3072 · Webmin · Webmin

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2360

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Webmin versions 0.21 through 0.99

Description The issue allows remote attackers to read and write to arbitrary files and execute arbitrary commands. This is possible via remote foreign require and remote foreign call requests when the RPC module is installed without root or admin privileges.

Recommendations For Webmin versions 0.21 through 0.99, consider updating the installation to run with proper root or admin privileges to mitigate the risk of exploitation. As a temporary workaround, restrict access to the RPC module until a proper fix is applied.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2002-2360

Affected Products

Webmin

References · 6

• 🔥 http://securityfocus.com/bid/5591 · Exploit
• 🔥 https://exploit-db.com/exploits/21765 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2360 · Security Note
• http://derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html · Note
• http://iss.net/security_center/static/9983.php · Note
• http://securiteam.com/unixfocus/5CP0R1P80G.html · Note