CVEvulnerability
CVE-2002-2360
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.
Affected configurations
• webmin webmin 0.21
• webmin webmin 0.22
• webmin webmin 0.31
• webmin webmin 0.41
• webmin webmin 0.42
• webmin webmin 0.51
• webmin webmin 0.76
• webmin webmin 0.77
• webmin webmin 0.78
• webmin webmin 0.79
• webmin webmin 0.80
• webmin webmin 0.85
• webmin webmin 0.88
• webmin webmin 0.91
• webmin webmin 0.92
• webmin webmin 0.93
• webmin webmin 0.94
• webmin webmin 0.950
• webmin webmin 0.960
• webmin webmin 0.970
• webmin webmin 0.980
• webmin webmin 0.990
Related
Weakness · not in database (1)
References
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html www.derkeiler.com
- http://www.iss.net/security_center/static/9983.php www.iss.net
- http://www.securiteam.com/unixfocus/5CP0R1P80G.html www.securiteam.com
- http://www.securityfocus.com/bid/5591 Exploit
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html www.derkeiler.com
- http://www.iss.net/security_center/static/9983.php www.iss.net
- http://www.securiteam.com/unixfocus/5CP0R1P80G.html www.securiteam.com
- http://www.securityfocus.com/bid/5591 Exploit