Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.

According to its self-reported version, the Webmin install hosted on the remote host is 0.91. It is, therefore, affected by a directory traversal vulnerability in edit_action.cgi.

The edit_action.cgi script exists on this web server.  Some versions of this file are vulnerable to a remote exploit.

It is possible that the remote web server contains one or more dangerous CGI scripts. 

Note that this plugin does not actually test for the underlying flaws but instead only searches for scripts with the same name as those with known vulnerabilities.

ID	Name	Product	Family	Severity
108537	Webmin 0.91 Directory Traversal	Nessus	CGI abuses	critical
1655	edit_action.cgi Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
11748	Multiple Dangerous CGI Script Detection	Nessus	CGI abuses	high

Detections

Analytics

CVE-2001-1196

critical

Tenable Plugins

critical

high

high