exploit/linux/http/piranha_passwd_exec

weaponized

RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution

view exploit source metasploittype exploitpublished 2000-04-04catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2000-0248US	high10.0	73.7% (99th)	Exploit	2000-04-24
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
CVE-2000-0322US	high10.0	41.6% (99th)	Exploit	2000-04-24
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.