CVE
- Id
- 4000
- CVE No.
- CVE-2001-1196
- Status
- Candidate
- Description
- Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a ".." (dot dot) in the argument.
- Phase
- Proposed (20020315)
- Votes
- ACCEPT(1) Frech | NOOP(5) Cole, Foat, Green, Wall, Ziese
- Comments
- Green> SINCE ROOT PRIVILEGES ARE REQUIRED TO USE THE TOOL, WHAT FURTHER | ESCALATION OF PRIVILEGE CAN OBTAINED?