NetSight
medium6.4

CVE-2002-1947

Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.

Impact

Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.

Affected products

VendorProductAffected versions
WebminWebmin
Versions 0.21, 0.22, 0.31, 0.41, 0.42, 0.51

References