CVE:CVE-2002-1673
CNNVD:CNNVD-200212-191
Webmin是一款基于WEB接口的Unix和Linux操作系统管理程序。
Webmin对显示在WEB接口的输出没有很好过滤脚本代码，可导致恶意脚本代码被执行。
Webmin对一些系统文件等输出显示到WEB接口缺少充分的过滤，可以攻击者更改这些文件内容，当ROOT用户浏览时被执行，另外，攻击者也可以在其他类型输出里插入恶意Javascript代码，当ROOT用户浏览此链接的时候，导致脚本代码在ROOT用户浏览器上执行，泄露基于COOKIE认证的敏感信息。
solution:Upgrade webmin webmin to a higher version than 0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.21,0.22,0.31,0.41,0.42,0.51,0.76,0.77,0.78,0.79,0.80,0.83,0.84,0.85,0.88,0.91,0.92,0.92.1,and avoid the version 0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.21,0.22,0.31,0.41,0.42,0.51,0.76,0.77,0.78,0.79,0.80,0.83,0.84,0.85,0.88,0.91,0.92,0.92.1