Every CVESearch/Get API key

CVE-2000-0322

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to...

10.0 HighPublic exploit

CVE-2000-0322 is a high vulnerability (CVSS 10.0) in Redhat Linux, published April 24, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 41.6%, the 98th percentile. No source names a fixed version.

What does this mean?
Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
41.6%EPSS, 98th percentile
Exploitation
None known2 public exploits
Fixed in
No fix listedNo source names one

Description

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.

Exploit likelihood

41.6%Up 40.6 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

What each source reports

NVD Score used10.0

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.

Record
CVE-2000-0322
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.

Record
CVE-2000-0322
Updated
2026-11-02
EUVDEUVD-2000-0321No score

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.

Record
EUVD-2000-0321
Updated
2026-11-03
GitHub AdvisoriesGHSA-cxxx-c74v-hjm6No score

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to...

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.

Record
GHSA-cxxx-c74v-hjm6
Updated
2026-11-02

History

History
RecordedChangedSources
exploits, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open