Back to CVE Browser

CVE-2001-1196

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1790%

EPSS Percentile39.17th

PublishedDec 17, 2001

Last ModifiedApr 16, 2026

Vulnerability Description

Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.

Affected Platforms (CPE)

📦

Webmin

Webmin

= 0.91

References & Advisories

🔗 http://marc.info/?l=webmin-l&m=100865390306103&w=2

🔗 http://www.iss.net/security_center/static/7711.php

🔗 http://www.securityfocus.com/archive/1/245980

🔗 http://www.securityfocus.com/bid/3698

🔗 http://marc.info/?l=webmin-l&m=100865390306103&w=2

🔗 http://www.iss.net/security_center/static/7711.php

🔗 http://www.securityfocus.com/archive/1/245980

🔗 http://www.securityfocus.com/bid/3698

Related Vulnerabilities

CVE-2005-117710.0

Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuratio...

CVE-2002-220110.0

The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell met...

CVE-2003-010110.0

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and...

CVE-2011-532210.0

GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for th...