CVE-2003-0101: Critical severity Usermin Usermin vulnerability
miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0101?
CVE-2003-0101 is considered a critical vulnerability due to the potential for remote attackers to gain root privileges.
How do I fix CVE-2003-0101?
To fix CVE-2003-0101, update Webmin to version 1.070 or Usermin to version 1.000 or later.
What software is affected by CVE-2003-0101?
CVE-2003-0101 affects Webmin versions prior to 1.070 and Usermin versions prior to 1.000.
What attack vector is leveraged by CVE-2003-0101?
CVE-2003-0101 is exploited through improperly handled metacharacters in Base-64 encoded strings during Basic authentication.
Can CVE-2003-0101 be exploited remotely?
Yes, CVE-2003-0101 can be exploited remotely, allowing attackers to spoof session IDs.