Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0378. PoCs published by Michal Zalewski.
AI-analyzed exploit summary This exploit leverages a vulnerability in the pam_console PAM module to allow a local user to continue monitoring device activity after logging out, potentially capturing sensitive information such as root passwords. The code opens a specified device file and continuously reads and displays its contents to the terminal.
Description
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
Exploits (1)
This exploit leverages a vulnerability in the pam_console PAM module to allow a local user to continue monitoring device activity after logging out, potentially capturing sensitive information such as root passwords. The code opens a specified device file and continuously reads and displays its contents to the terminal.