Webmin 0.99 Printer Administration privileges management

Summaryinfo

A vulnerability was found in Webmin 0.99. It has been classified as critical. Affected is an unknown function of the component Printer Administration Module. This manipulation causes privileges management. This vulnerability appears as CVE-2002-2201. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Webmin 0.99 (Software Management Software). It has been declared as very critical. Affected by this vulnerability is an unknown code block of the component Printer Administration Module. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE definition for the vulnerability is CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name.

The weakness was presented 12/31/2002 (Website). It is possible to read the advisory at webmin.com. This vulnerability is known as CVE-2002-2201 since 11/16/2005. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/12/2024). The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

The vulnerability scanner Nessus provides a plugin with the ID 108540 (Webmin 0.99 Remote Code Exection), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CGI abuses and running in the context r. The commercial vulnerability scanner Qualys is able to test this issue with plugin 11887 (Webmin prior to 1.500 Multiple Vulnerabilities).

Upgrading eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at X-Force (10052), Tenable (108540) and SecurityFocus (BID 47558†). See VDB-696, VDB-1756, VDB-1755 and VDB-2338 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Software Management Software

Name

• Webmin

Version

• 0.99

License

• open-source

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion