CVE-2001-1074

Опубликовано: 28 мая 2001

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-05/0262.html
Vendor Advisory
http://www.calderasystems.com/support/security/advisories/CSSA-2001-019.1.txt
Patch
Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-059.php3
Patch
http://www.securityfocus.com/bid/2795
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6627
http://archives.neohapsis.com/archives/bugtraq/2001-05/0262.html
Vendor Advisory
http://www.calderasystems.com/support/security/advisories/CSSA-2001-019.1.txt
Patch
Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-059.php3
Patch
http://www.securityfocus.com/bid/2795
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6627

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:webmin:webmin:0.5:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.6:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.7:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.80:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.83:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.84:*:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00046

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-jq2r-96cm-ch8h

github

больше 3 лет назад