medium5.0Public exploit code
CVE-2000-0668
pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP en…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Conectiva 4.x/5.x / RedHat 6.x - pam_console Remote User2000-07-27 · remote · linux · Verified
Impact
pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michael K. Johnson | Pam Console | Versions 0.66, 0.72_unpatched |
| Conectiva | Linux | Versions 4.0, 4.0es, 4.1, 4.2, 5.0, 5.1 |
| Redhat | Linux | Versions 6.0, 6.1, 6.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0398.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0455.html
- http://www.redhat.com/support/errata/RHSA-2000-044.html
- http://www.securityfocus.com/bid/1513
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5001
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0398.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0455.html
- http://www.redhat.com/support/errata/RHSA-2000-044.html
- http://www.securityfocus.com/bid/1513
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5001