CVE-2003-0101: Engardelinux Guardian Digital Webtool

High severity, CVSS 10.0. EPSS: 15.5% chance of exploitation in the next 30 days.

miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage returns (CRLF) in Base-64 encoded strings during Basic authentication, which allows remote attackers to spoof a session ID and gain root privileges.

Affected products

• Engardelinux Guardian Digital Webtool: version 1.2 only
• Usermin Usermin: version 0.4 only; version 0.5 only; version 0.6 only; version 0.7 only; version 0.8 only; version 0.9 only; …
• Webmin Webmin: version 1.0.50 only; version 1.0.60 only

Published 2003-03-03. Last modified 2026-06-16.