Description
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials.
References
- http://www.webmin.com/changes.html
- 4328 vdb-entry
- webmin-directory-permissions(8595) vdb-entry
- 20020320 Local privalege escalation issues with Webmin 0.92 mailing-list