CVE-2002-1673
First published: Tue Dec 31 2002(Updated: )
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Webmin | =0.22 | |
| Webmin | =0.7 | |
| Webmin | =0.88 | |
| Webmin | =0.4 | |
| Webmin | =0.51 | |
| Webmin | =0.31 | |
| Webmin | =0.42 | |
| Webmin | =0.92 | |
| Webmin | =0.78 | |
| Webmin | =0.21 | |
| Webmin | =0.77 | |
| Webmin | =0.2 | |
| Webmin | =0.85 | |
| Webmin | =0.6 | |
| Webmin | =0.41 | |
| Webmin | =0.83 | |
| Webmin | =0.84 | |
| Webmin | =0.3 | |
| Webmin | =0.79 | |
| Webmin | =0.76 | |
| Webmin | =0.91 | |
| Webmin | =0.80 | |
| Webmin | =0.1 | |
| Webmin | =0.5 | |
| Webmin | =0.92.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-1673?
CVE-2002-1673 is considered a moderate severity vulnerability due to the potential for local users to execute scripts.
How do I fix CVE-2002-1673?
To fix CVE-2002-1673, upgrade your Webmin installation to a version that has addressed this vulnerability.
Who is affected by CVE-2002-1673?
CVE-2002-1673 affects various versions of Webmin, specifically versions 0.22, 0.7, 0.88, and 0.92 among others.
What are the risks of CVE-2002-1673 exploitation?
Exploitation of CVE-2002-1673 can lead to unauthorized script execution, potentially allowing local users to steal sensitive information such as cookies.
Is CVE-2002-1673 still a concern today?
While CVE-2002-1673 is an older vulnerability, it may still pose a risk for installations of outdated Webmin software.
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/severity
- agent/references
- agent/remedy
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/webmin
- canonical/webmin
- version/webmin/0.22
- version/webmin/0.7
- version/webmin/0.88
- version/webmin/0.4
- version/webmin/0.51
- version/webmin/0.31
- version/webmin/0.42
- version/webmin/0.92
- version/webmin/0.78
- version/webmin/0.21
- version/webmin/0.77
- version/webmin/0.2
- version/webmin/0.85
- version/webmin/0.6
- version/webmin/0.41
- version/webmin/0.83
- version/webmin/0.84
- version/webmin/0.3
- version/webmin/0.79
- version/webmin/0.76
- version/webmin/0.91
- version/webmin/0.80
- version/webmin/0.1
- version/webmin/0.5
- version/webmin/0.92.1