7.2high
CVE-2000-03781 exploit
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those de…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 65%
Public exploits
1
Exploit-DB
Summary
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
Exploit prediction (EPSS)
1.08% probability of exploitation in the next 30 days, higher than 65% of all scored CVEs.
Exploits and detections
- EDB-19900 RedHat Linux 6.0/6.1/6.2 - 'pam_console' Monitor Activity After Logout · local · 2000-05-03
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
References
- archives.neohapsis.com /archives/bugtraq/2000-05/0023.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/1176 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2000-0378
- NVD: CVE-2000-0378
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.