Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2003-0101

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Published

2003-03-03T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application engardelinux guardian_digital_webtool 1.2 Yes
Application usermin usermin 0.4 Yes
Application usermin usermin 0.5 Yes
Application usermin usermin 0.6 Yes
Application usermin usermin 0.7 Yes
Application usermin usermin 0.8 Yes
Application usermin usermin 0.9 Yes
Application usermin usermin 0.91 Yes
Application usermin usermin 0.92 Yes
Application usermin usermin 0.93 Yes
Application usermin usermin 0.94 Yes
Application usermin usermin 0.95 Yes
Application usermin usermin 0.96 Yes
Application usermin usermin 0.97 Yes
Application usermin usermin 0.98 Yes
Application usermin usermin 0.99 Yes
Application webmin webmin 1.0.50 Yes
Application webmin webmin 1.0.60 Yes
References