Unscored severity · published Dec 31, 2002
CVE-2002-2360
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary…
–
CVSS
3.6%
EPSS
No
On KEV
Description
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Webmin · Webmin
0.21; 0.22; 0.31; 0.41; 0.42; 0.51; +16 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2360
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2360
www.derkeiler.com
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html
www.iss.net
http://www.iss.net/security_center/static/9983.php
www.securiteam.com
http://www.securiteam.com/unixfocus/5CP0R1P80G.html
Exploit
http://www.securityfocus.com/bid/5591
More from Webmin
9.8
CVE-2019-15107
Webmin Command Injection Vulnerability
9.8
CVE-2022-36446
software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command
9.8
CVE-2020-35769
miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program
9.8
CVE-2018-8712
An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled
9.6
CVE-2026-49243
Webmin: Reflected XSS in the Configuration module