CVE-2003-0101 in Webmininfo

Summary

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Disclosure

03/03/2003

Entries

1: VDB-20179

CPE

ready

Exploit

Download

CVSS

9.8

EPSS

0.15499

Activities

Very Low

Sources

Do you know our Splunk app?

Download it now for free!