NVD

Id
73248  
Name
CVE-2003-0101  
Description
miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2003-03-03  
Modified Date
2016-10-17  
Seq
2003-0101  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
377169 73248 CVE-2003-0101 20030602-01-I  View
377170 73248 CVE-2003-0101 HPSBUX0303-250  View
377171 73248 CVE-2003-0101 ESA-20030225-006  View
377172 73248 CVE-2003-0101 20030224 Webmin 1.050 - 1.060 remote exploit  View
377173 73248 CVE-2003-0101 20030224 [SNS Advisory No.62] Webmin/Usermin Session ID Spoofing Vulnerability "Episode 2"  View
377174 73248 CVE-2003-0101 20030224 GLSA: usermin (200302-14)  View
377175 73248 CVE-2003-0101 http://marc.info/?l=webmin-announce&m=104587858408101&w=2  View
377176 73248 CVE-2003-0101 N-058  View
377177 73248 CVE-2003-0101 DSA-319  View
377178 73248 CVE-2003-0101 webmin-usermin-root-access(11390)  View
377179 73248 CVE-2003-0101 http://www.lac.co.jp/security/english/snsadv_e/62_e.html  View
377180 73248 CVE-2003-0101 http://www.linuxsecurity.com/advisories/gentoo_advisory-2886.html  View
377181 73248 CVE-2003-0101 MDKSA-2003:025  View
377182 73248 CVE-2003-0101 6915  View
377183 73248 CVE-2003-0101 1006160  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63328 JVNDB-2003-000054 Webmin/Usermin の miniserv.pl においてなりすましが可能な脆弱性 Webmin/Usermin を動作させる miniserv.pl には、管理ユーザである "admin" を含むユーザがログイン済みであるとの偽の情報を持たせたセッション ID を発行させることが可能な脆弱性が存在します。 CVE-2003-0101 6929 CVE-2003-0101 73248 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000054.html 2003-02-24 2007-04-01 View