Vulnerability in Gentoo Webmin
CVE-2012-2982
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.5 (Medium). Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.622 (99.2th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 99.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.622 · newest: 0.622 · change: 0.000
Affected products
- Gentoo Webmin — versions 1.140, 1.150, 1.160
Public proof-of-concept exploits
- JohnHammond/CVE-2012-2982
- cd6629/CVE-2012-2982-Python-PoC
- 0xTas/CVE-2012-2982
- OstojaOfficial/CVE-2012-2982
- JRrooot/CVE-2012-2982-Webmin-RCE
- Gvmyz/CVE-2012-2982_Python
- marinovharisan/Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-
- boriitoo/CVE-2012-2982
- SincIDK/CVE-2012-2982-Exploit-Script
- lpuv/CVE-2012-2982
References
- www.americaninfosec.com/research/dossiers/AISG-12-001.pdf
- www.kb.cert.org/vuls/id/788478 (US Government Resource, Patch, third-party-advisory)
- github.com/webmin/webmin/commit/1f1411fe7404ec3ac03e803cfa7e01515e71a213 (Exploit, Patch)
- www.securitytracker.com/id (vdb-entry)
- americaninfosec.com/research/index.html
- www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX1…
Frequently asked questions
- What is CVE-2012-2982?
- CVE-2012-2982 is a vulnerability in Gentoo Webmin. Published 2012-09-11.
- Is CVE-2012-2982 known to be exploited?
- 42 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.