CVE Vulnerabilities

CVE-2000-0378

Published: May 03, 2000 | Modified: Sep 10, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.

Affected Software

Name Vendor Start Version End Version
Linux Redhat 6.0 (including) 6.0 (including)
Linux Redhat 6.1 (including) 6.1 (including)
Linux Redhat 6.2 (including) 6.2 (including)

References