CVE-2000-0378 | BDVDB-2026-1505 Detail

Description#

The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2000-05/0023.html
http://www.securityfocus.com/bid/1176

Exploit#

No public exploit known

History#

Version 12000-10-13Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.