CVE-2000-0378 Information disclosure in n/a
A local attacker can retain file descriptors to sniff device activity from subsequent users due to improper cleanup in the pam_console module.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-0378?
CVE-2000-0378 is a high-severity vulnerability in Redhat Linux, published on 13 Oct 2000. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
Which versions are affected by CVE-2000-0378?
It affects 1 product.
Products include Redhat Linux.
How do I fix CVE-2000-0378?
No fix has been published for CVE-2000-0378 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-0378 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2000-0378 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Redhat Linux
Sources
Also known as GHSA-5949-54q2-grjg.