Unrated severityNVD Advisory· Published Aug 12, 2002· Updated Apr 16, 2026
CVE-2002-0757
CVE-2002-0757
Description
(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations.
Affected products
10cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*
- cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*
- cpe:2.3:a:webmin:webmin:0.92.1:*:*:*:*:*:*:*
- cpe:2.3:a:webmin:webmin:0.93:*:*:*:*:*:*:*
- cpe:2.3:a:webmin:webmin:0.94:*:*:*:*:*:*:*
- cpe:2.3:a:webmin:webmin:0.95:*:*:*:*:*:*:*
- cpe:2.3:a:webmin:webmin:0.96:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.iss.net/security_center/static/9037.phpnvdPatchVendor Advisory
- www.linux-mandrake.com/en/security/2002/MDKSA-2002-033.phpnvdPatch
- www.securityfocus.com/bid/4700nvdPatchVendor Advisory
- online.securityfocus.com/archive/1/271466nvdExploitPatchVendor Advisory
News mentions
0No linked articles in our index yet.