CVE

Id
6930  
CVE No.
CVE-2003-0101  
Status
Candidate  
Description
miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.  
Phase
Modified (20080207)  
Votes
ACCEPT(4) Armstrong, Cole, Green, Jones | NOOP(2) Christey, Cox  
Comments
Christey> SGI:20030602-01-I | The "websetup v 3.5 package from IRIX 6.5.20 Applications CD" | uses Webmin; may wish to add this name to the description. | Christey> DEBIAN:DSA-319 | Christey> CIAC:N-058 | URL:http://www.ciac.org/ciac/bulletins/n-058.shtml | ENGARDE:ESA-20030225-006 | URL:http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0008.html | HP:HPSBUX0303-250 | URL:http://archives.neohapsis.com/archives/hp/2003-q1/0063.html | BID:6915 | URL:http://www.securityfocus.com/bid/6915  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
39924 6930 CVE-2003-0101 BUGTRAQ:20030224 [SNS Advisory No.62] Webmin/Usermin Session ID Spoofing Vulnerability "Episode 2"  View
39925 6930 CVE-2003-0101 URL:http://marc.info/?l=bugtraq&m=104610300325629&w=2  View
39926 6930 CVE-2003-0101 MISC:http://www.lac.co.jp/security/english/snsadv_e/62_e.html  View
39927 6930 CVE-2003-0101 BUGTRAQ:20030224 GLSA: usermin (200302-14)  View
39928 6930 CVE-2003-0101 URL:http://marc.info/?l=bugtraq&m=104610336226274&w=2  View
39929 6930 CVE-2003-0101 BUGTRAQ:20030224 Webmin 1.050 - 1.060 remote exploit  View
39930 6930 CVE-2003-0101 URL:http://marc.info/?l=bugtraq&m=104610245624895&w=2  View
39931 6930 CVE-2003-0101 CONFIRM:http://marc.info/?l=webmin-announce&m=104587858408101&w=2  View
39932 6930 CVE-2003-0101 CONFIRM:http://www.linuxsecurity.com/advisories/gentoo_advisory-2886.html  View
39933 6930 CVE-2003-0101 DEBIAN:DSA-319  View
39934 6930 CVE-2003-0101 URL:http://www.debian.org/security/2003/dsa-319  View
39935 6930 CVE-2003-0101 ENGARDE:ESA-20030225-006  View
39936 6930 CVE-2003-0101 URL:http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0008.html  View
39937 6930 CVE-2003-0101 HP:HPSBUX0303-250  View
39938 6930 CVE-2003-0101 URL:http://archives.neohapsis.com/archives/hp/2003-q1/0063.html  View
39939 6930 CVE-2003-0101 MANDRAKE:MDKSA-2003:025  View
39940 6930 CVE-2003-0101 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:025  View
39941 6930 CVE-2003-0101 SGI:20030602-01-I  View
39942 6930 CVE-2003-0101 URL:ftp://patches.sgi.com/support/free/security/advisories/20030602-01-I  View
39943 6930 CVE-2003-0101 CIAC:N-058  View
39944 6930 CVE-2003-0101 URL:http://www.ciac.org/ciac/bulletins/n-058.shtml  View
39945 6930 CVE-2003-0101 BID:6915  View
39946 6930 CVE-2003-0101 URL:http://www.securityfocus.com/bid/6915  View
39947 6930 CVE-2003-0101 SECTRACK:1006160  View
39948 6930 CVE-2003-0101 URL:http://www.securitytracker.com/id?1006160  View
39949 6930 CVE-2003-0101 SECUNIA:8115  View
39950 6930 CVE-2003-0101 URL:http://secunia.com/advisories/8115  View
39951 6930 CVE-2003-0101 SECUNIA:8163  View
39952 6930 CVE-2003-0101 URL:http://secunia.com/advisories/8163  View
39953 6930 CVE-2003-0101 XF:webmin-usermin-root-access(11390)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63336 JVNDB-2003-000062 複数ベンダ OS に含まれる file コマンドにおけるバッファオーバーフローの脆弱性 file コマンドには、ファイルの種別の判別するために利用するルーチンの中で、readelf.c 内の特定の箇所においてバッファオーバーフローが発生する脆弱性が存在します。 CVE-2003-0102 6930 4.6 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000062.html  View