CVE-2000-0378

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: May 3, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03793.6The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do CVE-2000-03807.1The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by req CVE-2000-03816.4The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a CVE-2000-03822.6ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the CVE-2000-03835.0The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.CVE-2000-038410.0NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure CVE-2000-03855.0FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email c CVE-2000-03867.5FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.CVE-2000-03872.1The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files.CVE-2000-038910.0Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.CVE-2000-039010.0Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-039110.0Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.