CVE-2001-1530

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 31, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-15317.5Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an emaiCVE-2001-15325.0WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted byCVE-2001-15335.3Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmenteCVE-2001-15342.1mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time anCVE-2001-15354.6Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies anCVE-2001-15367.5Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication inforCVE-2001-15377.5The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, CVE-2001-15387.5SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows remote attackers to gain access.CVE-2001-15395.0Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows remote attackers to causCVE-2001-15405.0IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header.CVE-2001-15417.2Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long CVE-2001-15427.5NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers t
CVE-2001-1530: Medium severity, CVSS 4.6 | Vulnix