CVE-2002-0757

CVE-2002-0757 describes an authentication bypass vulnerability affecting Webmin 0.96 and Usermin 0.90 when password timeouts are enabled. Attackers can exploit this flaw by injecting specific control characters into authentication information, forcing the applications to accept arbitrary username/session ID combinations and gain unauthorized access. The vulnerability carries a CVSS score of 7.5, indicating high severity, with a network attack vector and low attack complexity, allowing for potential compromise of confidentiality, integrity, and availability. Its EPSS score is very low, suggesting minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, nor are there publicly available exploit modules or tools like Metasploit or Nuclei. The vulnerability has garnered no community discussion or media coverage, indicating a lack of widespread attention or concern.