CVE-2002-0757
First published: Fri Jul 26 2002(Updated: )
(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Webmin Usermin | =0.9 | |
| Webmin Usermin | =0.8 | |
| Webmin | =0.96 | |
| Webmin | =0.93 | |
| Webmin | =0.92 | |
| Webmin | =0.95 | |
| Webmin | =0.94 | |
| Webmin | =0.91 | |
| Webmin Usermin | =0.7 | |
| Webmin | =0.92.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-0757?
CVE-2002-0757 is considered a high-severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2002-0757?
To fix CVE-2002-0757, upgrade Webmin and Usermin to the latest versions available that are not affected by this vulnerability.
Which versions are affected by CVE-2002-0757?
CVE-2002-0757 affects Webmin versions up to 0.96 and Usermin versions up to 0.90.
Can CVE-2002-0757 be exploited remotely?
Yes, CVE-2002-0757 can potentially be exploited both locally and remotely by an attacker.
What type of vulnerability is CVE-2002-0757?
CVE-2002-0757 is an authentication bypass vulnerability that allows attackers to bypass security measures.
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/usermin
- canonical/webmin usermin
- version/webmin usermin/0.9
- version/webmin usermin/0.8
- vendor/webmin
- canonical/webmin
- version/webmin/0.96
- version/webmin/0.93
- version/webmin/0.92
- version/webmin/0.95
- version/webmin/0.94
- version/webmin/0.91
- version/webmin usermin/0.7
- version/webmin/0.92.1