CVE-2001-1530

run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2001-12-31

Last modified

2024-09-16

Affected products

• Webmin (Webmin)

References

• http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0015.html
• http://www.securiteam.com/unixfocus/6R00M0K2UC.html