critical10.0Public exploit code
CVE-2000-0322
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RedHat Piranha Virtual Server Package - 'passwd.php3' Arbitrary Command Execution (Metasploit)2010-10-18 · webapps · php · Verified
Impact
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Linux | Version 6.2 |
References
- NVD record
- CVE.org record
- http://www.redhat.com/support/errata/RHSA-2000-014.html
- http://www.securityfocus.com/bid/1149
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Enip.BSO.23.0004241601140.28851-100000%40www.whitehats.com
- http://www.redhat.com/support/errata/RHSA-2000-014.html
- http://www.securityfocus.com/bid/1149
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Enip.BSO.23.0004241601140.28851-100000%40www.whitehats.com