Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:42
Type | Values Removed | Values Added |
---|---|---|
References | () ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc - | |
References | () http://www.iss.net/security_center/static/10381.php - Patch | |
References | () http://www.securityfocus.com/bid/5936 - Patch | |
References | () http://www.webmin.com/changes.html - |
Information
Published : 2002-12-31 05:00
Updated : 2024-11-20 23:42
NVD link : CVE-2002-1947
Mitre link : CVE-2002-1947
CVE.ORG link : CVE-2002-1947
JSON object : View
Products Affected
webmin
- webmin
CWE