CVE-2000-0378
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
Key facts
- CVSS score
- 7.2 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:L/AC:L/Au:N/C:C/I:C/A:C- EPSS score
- 1.1% (65th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2000-0377)
- Published
- May 3, 2000
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2000-0377 in the EU Vulnerability Database. Last updated in EUVD on August 8, 2024.
View on the EU Vulnerability DatabaseAffected products
- redhat / linux
- redhat / linux
- redhat / linux
Certified products that may be affected
10 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Red Hat Enterprise Linux on 32 bit x86 Architecture, Version 6.2 - Red Hat, Inc. - Common Criteria BSI-DSZ-CC-0924-2014 - archived
- Red Hat Enterprise Linux 6.2 dm-crypt Cryptographic Module - Red Hat®, Inc. - FIPS 140 1933 - historical
- Red Hat Enterprise Linux 6.2 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 1901 - historical
- Red Hat Enterprise Linux 6.2 Openswan Cryptographic Module - Red Hat®, Inc. - FIPS 140 1859 - historical
- Red Hat Enterprise Linux Version 6.2 with KVM Virtualization for x86 Architectures - Red Hat, Inc. - Common Criteria BSI-DSZ-CC-0754-2012 - archived
See all 10 in the Security Certifications Explorer.
References
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain