run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Webmin | Webmin | 0.80 (including) | 0.80 (including) |
| Webmin | Webmin | 0.88 (including) | 0.88 (including) |
References
