CVE-2003-0101

Published: Mar 3, 2003Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Affected (18)

Products: Engardelinux: Guardian Digital Webtool · Usermin: Usermin · Webmin: Webmin

1 product

Guardian Digital Webtool

1 product

1 product

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Engardelinux Guardian Digital Webtool	Version 1.2
Usermin Usermin	Version 0.4
Usermin Usermin	Version 0.5
Usermin Usermin	Version 0.6
Usermin Usermin	Version 0.7
Usermin Usermin	Version 0.8
Usermin Usermin	Version 0.91
Usermin Usermin	Version 0.92
Usermin Usermin	Version 0.93
Usermin Usermin	Version 0.94
Usermin Usermin	Version 0.95
Usermin Usermin	Version 0.96
Usermin Usermin	Version 0.97
Usermin Usermin	Version 0.98
Usermin Usermin	Version 0.99
Usermin Usermin	Version 0.9
Webmin Webmin	Version 1.0.50
Webmin Webmin	Version 1.0.60

References (34)

ftp://patches.sgi.com/support/free/security/advisories/20030602-01-I (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/hp/2003-q1/0063.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0008.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104610245624895&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104610300325629&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104610336226274&w=2

Source: cve@mitre.org

http://marc.info/?l=webmin-announce&m=104587858408101&w=2

Source: cve@mitre.org

http://secunia.com/advisories/8115

Source: cve@mitre.org

http://secunia.com/advisories/8163

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/n-058.shtml

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-319

Source: cve@mitre.org

http://www.iss.net/security_center/static/11390.php

Source: cve@mitre.org

Vendor Advisory

http://www.lac.co.jp/security/english/snsadv_e/62_e.html

Source: cve@mitre.org

http://www.linuxsecurity.com/advisories/gentoo_advisory-2886.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2003:025

Source: cve@mitre.org

http://www.securityfocus.com/bid/6915

Source: cve@mitre.org

http://www.securitytracker.com/id?1006160

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20030602-01-I (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/hp/2003-q1/0063.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/linux/engarde/2003-q1/0008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104610245624895&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104610300325629&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104610336226274&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=webmin-announce&m=104587858408101&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/8115

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/8163

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ciac.org/ciac/bulletins/n-058.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-319

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/11390.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.lac.co.jp/security/english/snsadv_e/62_e.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.linuxsecurity.com/advisories/gentoo_advisory-2886.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2003:025

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/6915

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1006160

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.