CVE-2002-1673: Low severity webmin webmin vulnerability

Published Dec 31, 2002

Updated

The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.

Affected Software

25 affected components

webmin webmin=0.22

webmin webmin=0.7

webmin webmin=0.88

webmin webmin=0.4

webmin webmin=0.51

webmin webmin=0.31

webmin webmin=0.42

webmin webmin=0.92

webmin webmin=0.78

webmin webmin=0.21

webmin webmin=0.77

webmin webmin=0.2

webmin webmin=0.85

webmin webmin=0.6

webmin webmin=0.41

webmin webmin=0.83

webmin webmin=0.84

webmin webmin=0.3

webmin webmin=0.79

webmin webmin=0.76

webmin webmin=0.91

webmin webmin=0.80

webmin webmin=0.1

webmin webmin=0.5

webmin webmin=0.92.1

Remediation

Patch Available

http://www.securityfocus.com/bid/4329

Event History

Dec 31, 2002

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1673?

CVE-2002-1673 is considered a moderate severity vulnerability due to the potential for local users to execute scripts.

How do I fix CVE-2002-1673?

To fix CVE-2002-1673, upgrade your Webmin installation to a version that has addressed this vulnerability.

Who is affected by CVE-2002-1673?

CVE-2002-1673 affects various versions of Webmin, specifically versions 0.22, 0.7, 0.88, and 0.92 among others.

What are the risks of CVE-2002-1673 exploitation?

Exploitation of CVE-2002-1673 can lead to unauthorized script execution, potentially allowing local users to steal sensitive information such as cookies.

Is CVE-2002-1673 still a concern today?

While CVE-2002-1673 is an older vulnerability, it may still pose a risk for installations of outdated Webmin software.