CVE-2001-1074 in Webmininfo

Summary

Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsible

Disclosure

05/28/2001

Entries

VDB-16698

CPE

ready

CVSS

8.4

EPSS

0.00149

Activities

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2001-1074
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2001-1074
CVE Detailshttps://www.cvedetails.com/cve/CVE-2001-1074/

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!