CVE-2002-1672 Information disclosure in n/a

What is CVE-2002-1672?

CVE-2002-1672 is a low-severity vulnerability in Webmin Webmin, published on 21 Jun 2005. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials.

Which versions are affected by CVE-2002-1672?

It affects 1 product.

Products include Webmin Webmin.

How do I fix CVE-2002-1672?

No fix has been published for CVE-2002-1672 yet. Limit exposure of the affected software until one is available.

Is CVE-2002-1672 being exploited?

There is no known exploitation of CVE-2002-1672 in the wild and no public exploit code.

Other vulnerabilities in Webmin Webmin

• CVE-2019-15107 Webmin Command Injection Exploited Critical 9.8
• CVE-2002-2201 Command injection in n/a Critical 10.0
• CVE-2001-1196 Path traversal in n/a Critical 10.0
• CVE-2024-12828 Webmin CGI Command Injection Remote Code Execution Vulnerability Critical 9.9
• CVE-2022-36446 Cross-site scripting in n/a Critical 9.8

All Webmin Webmin vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-9582-4m3g-fg43.