VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 12, 2002· Updated Jun 16, 2026

CVE-2002-0757

CVE-2002-0757

Description

(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations.

Affected products

12
  • Usermin/Usermin3 versions
    cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:usermin:usermin:0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:usermin:usermin:0.9:*:*:*:*:*:*:*
  • Webmin/Webmin8 versions
    cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*
    • cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*
    • cpe:2.3:a:webmin:webmin:0.92.1:*:*:*:*:*:*:*
    • cpe:2.3:a:webmin:webmin:0.93:*:*:*:*:*:*:*
    • cpe:2.3:a:webmin:webmin:0.94:*:*:*:*:*:*:*
    • cpe:2.3:a:webmin:webmin:0.95:*:*:*:*:*:*:*
    • cpe:2.3:a:webmin:webmin:0.96:*:*:*:*:*:*:*
    • (no CPE)range: =0.96
  • Webmin/Userminllm-fuzzy
    Range: =0.90

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.