CVSS: 7.2EPSS: 0%CPEs: 6EXPL: 1CVE-2001-1074
https://notcve.org/view.php?id=CVE-2001-1074
Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges. • http://archives.neohapsis.com/archives/bugtraq/2001-05/0262.html http://www.calderasystems.com/support/security/advisories/CSSA-2001-019.1.txt http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-059.php3 http://www.securityfocus.com/bid/2795 https://exchange.xforce.ibmcloud.com/vulnerabilities/6627 •
CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-1999-1074
https://notcve.org/view.php?id=CVE-1999-1074
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking. • http://www.securityfocus.com/archive/1/9138 http://www.securityfocus.com/bid/98 http://www.webmin.com/webmin/changes.html •