CVE-2003-0101 miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authe...
HighCVSS 10.0
EPSS 15.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| engardelinux guardian digital webtool | = 1.2 | No fix listed |
| usermin | = 0.4 | No fix listed |
| usermin | = 0.5 | No fix listed |
| usermin | = 0.6 | No fix listed |
| usermin | = 0.7 | No fix listed |
| usermin | = 0.8 | No fix listed |
| usermin | = 0.9 | No fix listed |
| usermin | = 0.91 | No fix listed |
| usermin | = 0.92 | No fix listed |
| usermin | = 0.93 | No fix listed |
| usermin | = 0.94 | No fix listed |
| usermin | = 0.95 | No fix listed |
| usermin | = 0.96 | No fix listed |
| usermin | = 0.97 | No fix listed |
| usermin | = 0.98 | No fix listed |
| usermin | = 0.99 | No fix listed |
| webmin | = 1.0.50 | No fix listed |
| webmin | = 1.0.60 | No fix listed |
References
- HPSBUX0303-250 vendor-advisory
- ESA-20030225-006 vendor-advisory
- 20030224 Webmin 1.050 - 1.060 remote exploit mailing-list
- 20030224 [SNS Advisory No.62] Webmin/Usermin Session ID Spoofing Vulnerability "Episode 2" mailing-list
- 20030224 GLSA: usermin (200302-14) mailing-list
- marc.info
- 8115 third-party-advisory
- 8163 third-party-advisory
- N-058 government-resource third-party-advisory
- DSA-319 vendor-advisory
- webmin-usermin-root-access(11390) vdb-entry vendor-advisory
- www.lac.co.jp
- www.linuxsecurity.com
- MDKSA-2003:025 vendor-advisory
- 6915 vdb-entry
- 1006160 vdb-entry