Security Advisory

CVE-2001-1074

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-06-25 04:00:00

Last updated 2024-08-08 04:44:07

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.

← Browse all CVEs View on cve.org ↗