Skip to content

CVE-2003-0101

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle...

10.0 HighPublic exploitFix available

CVE-2003-0101 is a high vulnerability (CVSS 10.0) in Usermin, published February 26, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 15.5%, the 96th percentile. Fixed in webmin 0.94-7woody1.

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Exploit likelihood

15.5%Up 2.9 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Record: CVE-2003-0101
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Record: CVE-2003-0101
Updated: 2026-11-02

EUVDEUVD-2003-0097 No score

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Record: EUVD-2003-0097
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hm72-qxg7-34pg No score

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle...

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Record: GHSA-hm72-qxg7-34pg
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`webmin` Debian:3.0	before 0.94-7woody1	0.94-7woody1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Webmin 0.9x / Usermin 0.9x/1.0 - Access Session ID Spoofing	2003-02-20

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 12 moreShow less