CVE-2000-0378 json
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those de…
published 2000-05-03 26 y ago modified 2026-06-16 4 mo ago also EUVD-2000-0377
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.1%
- EPSS 1.1% chance of exploitation in 30 days, percentile 65%
- public exploits
- 1
- Exploit-DB
Summary
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
Timeline
- First public exploit (EDB-19900)
- Published
Exploit prediction
1.08% chance of exploitation in the next 30 days, higher than 65% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-19900 RedHat Linux 6.0/6.1/6.2 - 'pam_console' Monitor Activity After Logout local, 2000-05-03
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
References
-
archives.neohapsis.com
/archives/bugtraq/2000-05/0023.html
mailing-list
-
securityfocus.com
/bid/1176
vdb-entry
Sources
- CVE List CVE-2000-0378
- NVD CVE-2000-0378
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.