CVE-2000-0248 Hardcoded credentials in n/a
Remote attackers can execute arbitrary commands via a backdoor password in the LVS web GUI, requiring immediate patching.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-0248?
CVE-2000-0248 is a critical vulnerability in Redhat Linux, published on 26 Apr 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
Which versions are affected by CVE-2000-0248?
It affects 1 product.
Products include Redhat Linux.
How do I fix CVE-2000-0248?
No fix has been published for CVE-2000-0248 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-0248 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2000-0248 exists.
Public exploit code: 1 Metasploit module and 2 Exploit-DB entries.
Other vulnerabilities in Redhat Linux
Sources
Also known as GHSA-9rr2-45q8-fjmg.