CVE-2000-0378

High CVSS 7.2

Published 2000-05-03 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-2000-0378, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.

Sources

NVD record for CVE-2000-0378

CVSS vector: AV:L/AC:L/Au:N/C:C/I:C/A:C