CVE-2002-0756: High severity Usermin Usermin vulnerability
Published Jul 26, 2002
·Updated
Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.
Affected Software
10 affected components
Usermin Usermin=0.7
Usermin Usermin=0.8
Usermin Usermin=0.9
webmin webmin=0.91
webmin webmin=0.92
webmin webmin=0.92.1
webmin webmin=0.93
webmin webmin=0.94
webmin webmin=0.95
webmin webmin=0.96
Remediation
Patch Available
Patch Available
Event History
Jul 26, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0756?
CVE-2002-0756 is typically classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2002-0756?
To fix CVE-2002-0756, update Webmin and Usermin to the latest version that addresses this vulnerability.
3
Which versions of Webmin are affected by CVE-2002-0756?
CVE-2002-0756 affects Webmin versions 0.91 through 0.96.
4
Which versions of Usermin are affected by CVE-2002-0756?
CVE-2002-0756 affects Usermin versions 0.7 through 0.9.
5
What type of attack does CVE-2002-0756 enable?
CVE-2002-0756 enables attackers to perform cross-site scripting (XSS) attacks potentially allowing cookie theft.