CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0101

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.155

EPSS Ranking 94.2%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2003-0101

Engardelinux » Guardian Digital Webtool » Version: 1.2

cpe:2.3:a:engardelinux:guardian_digital_webtool:1.2
Usermin » Usermin » Version: 0.4

cpe:2.3:a:usermin:usermin:0.4
Usermin » Usermin » Version: 0.5

cpe:2.3:a:usermin:usermin:0.5
Usermin » Usermin » Version: 0.6

cpe:2.3:a:usermin:usermin:0.6
Usermin » Usermin » Version: 0.7

cpe:2.3:a:usermin:usermin:0.7
Usermin » Usermin » Version: 0.8

cpe:2.3:a:usermin:usermin:0.8
Usermin » Usermin » Version: 0.9

cpe:2.3:a:usermin:usermin:0.9
Usermin » Usermin » Version: 0.91

cpe:2.3:a:usermin:usermin:0.91
Usermin » Usermin » Version: 0.92

cpe:2.3:a:usermin:usermin:0.92
Usermin » Usermin » Version: 0.93

cpe:2.3:a:usermin:usermin:0.93
Usermin » Usermin » Version: 0.94

cpe:2.3:a:usermin:usermin:0.94
Usermin » Usermin » Version: 0.95

cpe:2.3:a:usermin:usermin:0.95
Usermin » Usermin » Version: 0.96

cpe:2.3:a:usermin:usermin:0.96
Usermin » Usermin » Version: 0.97

cpe:2.3:a:usermin:usermin:0.97
Usermin » Usermin » Version: 0.98

cpe:2.3:a:usermin:usermin:0.98
Usermin » Usermin » Version: 0.99

cpe:2.3:a:usermin:usermin:0.99
Webmin » Webmin » Version: 1.0.50

cpe:2.3:a:webmin:webmin:1.0.50
Webmin » Webmin » Version: 1.0.60

cpe:2.3:a:webmin:webmin:1.0.60

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0101

Products

Pricing

Contact Us