CVE-2002-1672 in Webmin
Summary
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user s cookie-based authentication credentials and possibly hijack the root user s session using the credentials.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
06/21/2005
Disclosure
12/31/2002
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 19317 | Webmin webmin privileges management | 269 | Not defined | Official fix | CVE-2002-1672 |