CVE-2003-0101: miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded…

Description

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Exploitation

Is it being used?

Exploit prediction (EPSS)15.5% · higher than 97% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

GD

Guardian Digital Webtool · Engardelinux

1.2 · source: NVD

US

Usermin · Usermin

0.4; 0.5; 0.6; 0.7; 0.8; 0.9; +9 more · source: NVD

WE

Webmin · Webmin

1.0.50; 1.0.60 · source: NVD