CVE-2002-1672 in Webmin

Sumário (Inglês)

Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user s cookie-based authentication credentials and possibly hijack the root user s session using the credentials.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

21/06/2005

Divulgação

31/12/2002

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
19317	Webmin webmin Elevação de Privilégios	269	Não definido	Correção oficial	CVE-2002-1672

Fontes

• MITRE
• NVD
• CVE Details