National Vulnerability Database (CVE-2000-0248)

National Cyber-Alert System Vulnerability Summary: CVE-2000-0248
Orirignal release date: 2000-04-24 Source: US-CERT/NIST ### Overview The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor passowrd that allows remote attackers to execute arbitrary commands. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: config Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: ISS X-Force Name: Backdoor Password in Red Hat Linux Virtual Server Package Hyperlink: http://xforce.iss.net/alerts/advise46.php3 External Source: Security Focus Name: BID1148 Hyperlink: http://www.securityfocus.com/bid/1148 External Source: Bugtraq Name: piranha default password/exploit Hyperlink: http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3DEnip.BSO.23.0004241601140.28851-100000@www.whitehats.com ### Vulnerable Software and Vendor Red Hat Linux (Red Hat) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0248