CVE-2002-0757

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations.

Ссылки

http://online.securityfocus.com/archive/1/271466
Exploit
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9037.php
Patch
Vendor Advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-033.php
Patch
http://www.securityfocus.com/bid/4700
Patch
Vendor Advisory
http://online.securityfocus.com/archive/1/271466
Exploit
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9037.php
Patch
Vendor Advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-033.php
Patch
http://www.securityfocus.com/bid/4700
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:*

cpe:2.3:a:usermin:usermin:0.8:*:*:*:*:*:*:*

cpe:2.3:a:usermin:usermin:0.9:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.92.1:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.93:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.94:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.95:*:*:*:*:*:*:*

cpe:2.3:a:webmin:webmin:0.96:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01851

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-0757

debian

почти 24 года назад

1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled al ...

GHSA-rhfc-54hm-rr6c

github

больше 4 лет назад