CVE-2002-0757

(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via…

published July 26, 2002

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01851 · 78.8th percentile
Published
2002-07-26T04:00Z
EPSS history
Timeline
  • 26 JUL 04:00Z
    (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via…
    cvelistv5