CVE-2000-0668

Description

pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.

Affected products

• conectiva / linux4.0 – 4.0
• conectiva / linux4.0es – 4.0es
• conectiva / linux4.1 – 4.1
• conectiva / linux4.2 – 4.2
• conectiva / linux5.0 – 5.0
• conectiva / linux5.1 – 5.1
• michael_k._johnson / pam_console0.72_unpatched – 0.72_unpatched
• michael_k._johnson / pam_console0.66 – 0.66
• RedHat / linux6.2 – 6.2
• RedHat / linux6.2 – 6.2
• RedHat / linux6.0 – 6.0
• RedHat / linux6.0 – 6.0
• RedHat / linux6.0 – 6.0
• RedHat / linux6.1 – 6.1
• RedHat / linux6.1 – 6.1
• RedHat / linux6.1 – 6.1
• RedHat / linux6.2 – 6.2

Exploits & proofs of concept

• exploit-dbConectiva 4.x/5.x / RedHat 6.x - pam_console Remote Userby bkw1a

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-07/0455.html
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-07/0398.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5001
• MISChttp://www.securityfocus.com/bid/1513
• MISChttp://www.redhat.com/support/errata/RHSA-2000-044.html