CVE-2000-0322: Critical severity redhat Linux vulnerability

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Remove

   Remove redhat/piranha/passwd.php3 from your environment.

   Remove/uninstall the passwd.php3 CGI script from systems where it is not required.

2. Configuration

   Change filesystem ownership/permissions to prevent unprivileged local users from executing passwd.php3 (for example, chown root:root and chmod 700 or remove the webserver-executable bit) and/or disable CGI processing of this script in the web server configuration until a fix is available.

   Red Hat Piranha passwd.php3 CGI file execute permission / CGI handling = prevent execution by unprivileged users or disable CGI handling for this script
3. Compensating control

   Restrict access to the vulnerable script and the hosting service: apply filesystem ACLs limiting which local accounts can read/execute the file, restrict management/administrative access to trusted accounts, and isolate the service (chroot/jail/container) to limit impact until the issue is remediated.

4. Operational

   Audit system and web server logs for signs of command execution or other compromise related to passwd.php3; if suspicious activity is found, perform incident response (contain, eradicate, recover) such as removing malicious files, restoring from known-good backups, and rotating credentials.

Event History

Frequently Asked Questions