Vulnerability CVE-2012-2981 - CERT Civis.Net

Vulnerability Name:

CVE-2012-2981 (CCN-78317)

Assigned:

2012-09-06

Published:

2012-09-06

Updated:

2013-05-30

Summary:

Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.0 Medium (CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P)
4.4 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MISC
Type: UNKNOWN
http://americaninfosec.com/research/index.html

Source: MITRE
Type: CNA
CVE-2012-2981

Source: CCN
Type: SA50512
Webmin Multiple Vulnerabilities

Source: CCN
Type: SA51515
Oracle Solaris Webmin Multiple Vulnerabilities

Source: MISC
Type: UNKNOWN
http://www.americaninfosec.com/research/dossiers/AISG-12-000.pdf

Source: CERT-VN
Type: Patch, US Government Resource
VU#788478

Source: CCN
Type: OSVDB ID: 85245
Webmin save_mon.cgi Monitor Type Name Remote Perl Code Execution

Source: CCN
Type: OSVDB ID: 85246
Webmin edit_mon.cgi Monitor Type Name Remote Perl Code Execution

Source: CCN
Type: BID-55446
Webmin Multiple Input Validation Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1027507

Source: CCN
Type: Webmin Web site
Webmin

Source: CONFIRM
Type: UNKNOWN
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

Source: CCN
Type: Oracle Security Blog, Dec 11, 2012
Multiple vulnerabilities in Webmin

Source: XF
Type: UNKNOWN
webmin-editmon-code-exec(78317)

Source: CCN
Type: Webmin GIT Repository
Webmin

Source: CONFIRM
Type: Patch
https://github.com/webmin/webmin/commit/ed7365064c189b8f136a9f952062249167d1bd9e

Vulnerable Configuration:

Configuration 1:

cpe:/a:gentoo:webmin:1.140:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.150:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.160:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.170:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.180:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.200:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.210:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.220:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.230:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.240:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.260:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.270:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.280:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.290:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.300:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.310:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.320:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.330:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.340:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.370:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.380:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.390:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.400:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.410:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.420:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.430:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.440:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.450:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.470:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.480:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.500:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.510:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.520:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.530:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.550:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.560:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.570:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:1.580:*:*:*:*:*:*:*

OR cpe:/a:gentoo:webmin:*:*:*:*:*:*:*:* (Version <= 1.590)

Configuration CCN 1:

cpe:/a:webmin:webmin:1.580:*:*:*:*:*:*:*

AND

cpe:/o:sun:solaris:10::64bit:*:*:*:*:*

Denotes that component is vulnerable