CVE-2002-2201 Command injection in n/a

Critical 10.0 Published 16 Nov 2005 Updated 16 Sep 2024

Remote attackers with administrative access can execute arbitrary commands via shell metacharacters in the printer name field.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2002-2201?

CVE-2002-2201 is a critical command injection vulnerability in Webmin Webmin, published on 16 Nov 2005. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name.

Which versions are affected by CVE-2002-2201?

It affects 1 product.

Products include Webmin Webmin.

How do I fix CVE-2002-2201?

No fix has been published for CVE-2002-2201 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2002-2201 being exploited?

There is no known exploitation of CVE-2002-2201 in the wild and no public exploit code.

All Webmin Webmin vulnerabilities

Sources

Also known as GHSA-jvmm-gcp4-vg22.