CVE-2000-0668: Medium severity Conectiva Linux vulnerability

Published Jul 27, 2000
·
Updated

pamconsole PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled.

Affected Software

17 affected components
Conectiva Linux=4.2
Conectiva Linux=4.1
Conectiva Linux=5.1
Conectiva Linux=4.0es
Michael K. Johnson Pam Console=0.66
Michael K. Johnson Pam Console=0.72_unpatched
Conectiva Linux=5.0
Conectiva Linux=4.0
redhat Linux=6.1
redhat Linux=6.2
redhat Linux=6.0
redhat Linux=6.1
redhat Linux=6.0
redhat Linux=6.2
redhat Linux=6.0
redhat Linux=6.1
redhat Linux=6.2

Remediation

Event History

Jul 27, 2000
CVE Published
04:00 AM
Oct 13, 2000
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2000-0668?

CVE-2000-0668 has been classified as a high severity vulnerability due to the potential for unauthorized system access and reboot.

2

How do I fix CVE-2000-0668?

To fix CVE-2000-0668, disable the XDMCP feature in your display manager configuration or apply the relevant security patches for affected versions.

3

Which systems are affected by CVE-2000-0668?

CVE-2000-0668 affects Conectiva Linux versions 4.0, 4.1, 4.2, 5.0, 5.1 and Red Hat Linux versions 6.0, 6.1, 6.2.

4

What are the implications of CVE-2000-0668 on system security?

The implications of CVE-2000-0668 include the potential for local users to gain unauthorized access to the system console, leading to security breaches.

5

Is there a workaround for CVE-2000-0668 if I cannot patch immediately?

A workaround for CVE-2000-0668 includes disabling or restricting access to XDMCP until a proper patch can be applied.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203