What is the severity of CVE-2002-1947?

CVE-2002-1947 is classified as a high severity vulnerability due to its potential to allow remote attackers to eavesdrop on SSL sessions.

How do I fix CVE-2002-1947?

To fix CVE-2002-1947, upgrade Webmin to a version later than 1.0 that does not use a shared SSL key.

Which versions of Webmin are affected by CVE-2002-1947?

CVE-2002-1947 affects Webmin versions from 0.21 to 1.0, including 0.21, 0.22, 0.31, 0.42, and up to 0.99.

What type of vulnerability is CVE-2002-1947?

CVE-2002-1947 is an SSL session hijacking vulnerability that enables attackers to eavesdrop on encrypted communications.

Is CVE-2002-1947 still a relevant threat?

While CVE-2002-1947 was reported in 2002, its exploitability may still be relevant for systems using outdated versions of Webmin.

Vulnerability/
CVE-2002-1947

medium

6.4

CWE

NVD-CWE-Other

31/12/2002

28/6/2005

8/8/2024

CVE-2002-1947

First published: Tue Dec 31 2002(Updated: )

Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Webmin Webmin	=0.97
Webmin Webmin	=0.22
Webmin Webmin	=0.99
Webmin Webmin	=0.88
Webmin Webmin	=0.96
Webmin Webmin	=0.51
Webmin Webmin	=0.93
Webmin Webmin	=0.31
Webmin Webmin	=0.42
Webmin Webmin	=1.0.00
Webmin Webmin	=0.92
Webmin Webmin	=0.78
Webmin Webmin	=0.21
Webmin Webmin	=0.77
Webmin Webmin	=0.85
Webmin Webmin	=0.41
Webmin Webmin	=0.95
Webmin Webmin	=0.94
Webmin Webmin	=0.79
Webmin Webmin	=0.76
Webmin Webmin	=0.91
Webmin Webmin	=0.80
Webmin Webmin	=0.98

Remedy

http://www.iss.net/security_center/static/10381.php

Remedy

http://www.securityfocus.com/bid/5936

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2002-1947?
CVE-2002-1947 is classified as a high severity vulnerability due to its potential to allow remote attackers to eavesdrop on SSL sessions.
How do I fix CVE-2002-1947?
To fix CVE-2002-1947, upgrade Webmin to a version later than 1.0 that does not use a shared SSL key.
Which versions of Webmin are affected by CVE-2002-1947?
CVE-2002-1947 affects Webmin versions from 0.21 to 1.0, including 0.21, 0.22, 0.31, 0.42, and up to 0.99.
What type of vulnerability is CVE-2002-1947?
CVE-2002-1947 is an SSL session hijacking vulnerability that enables attackers to eavesdrop on encrypted communications.
Is CVE-2002-1947 still a relevant threat?
While CVE-2002-1947 was reported in 2002, its exploitability may still be relevant for systems using outdated versions of Webmin.

collector/nvd-historical
collector/nvd-index
agent/type
agent/softwarecombine
agent/first-publish-date
agent/remedy
collector/mitre-cve
source/MITRE
agent/weakness
agent/author
agent/references
agent/last-modified-date
agent/severity
agent/description
agent/event
agent/tags
agent/source
vendor/webmin
canonical/webmin webmin
version/webmin webmin/0.97
version/webmin webmin/0.22
version/webmin webmin/0.99
version/webmin webmin/0.88
version/webmin webmin/0.96
version/webmin webmin/0.51
version/webmin webmin/0.93
version/webmin webmin/0.31
version/webmin webmin/0.42
version/webmin webmin/1.0.00
version/webmin webmin/0.92
version/webmin webmin/0.78
version/webmin webmin/0.21
version/webmin webmin/0.77
version/webmin webmin/0.85
version/webmin webmin/0.41
version/webmin webmin/0.95
version/webmin webmin/0.94
version/webmin webmin/0.79
version/webmin webmin/0.76
version/webmin webmin/0.91
version/webmin webmin/0.80
version/webmin webmin/0.98

Frequently Asked Questions

What is the severity of CVE-2002-1947?
CVE-2002-1947 is classified as a high severity vulnerability due to its potential to allow remote attackers to eavesdrop on SSL sessions.
How do I fix CVE-2002-1947?
To fix CVE-2002-1947, upgrade Webmin to a version later than 1.0 that does not use a shared SSL key.
Which versions of Webmin are affected by CVE-2002-1947?
CVE-2002-1947 affects Webmin versions from 0.21 to 1.0, including 0.21, 0.22, 0.31, 0.42, and up to 0.99.
What type of vulnerability is CVE-2002-1947?
CVE-2002-1947 is an SSL session hijacking vulnerability that enables attackers to eavesdrop on encrypted communications.
Is CVE-2002-1947 still a relevant threat?
While CVE-2002-1947 was reported in 2002, its exploitability may still be relevant for systems using outdated versions of Webmin.

CVE-2002-1947

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2002-1947?

How do I fix CVE-2002-1947?

Which versions of Webmin are affected by CVE-2002-1947?

What type of vulnerability is CVE-2002-1947?

Is CVE-2002-1947 still a relevant threat?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2002-1947?

How do I fix CVE-2002-1947?

Which versions of Webmin are affected by CVE-2002-1947?

What type of vulnerability is CVE-2002-1947?

Is CVE-2002-1947 still a relevant threat?