CVE-2007-1716
First published: Tue Mar 27 2007(Updated: )
pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Enterprise Linux | =4.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
- http://security.gentoo.org/glsa/glsa-200711-23.xml
- http://www.redhat.com/support/errata/RHSA-2007-0465.html
- http://www.redhat.com/support/errata/RHSA-2007-0555.html
- http://www.redhat.com/support/errata/RHSA-2007-0737.html
- http://secunia.com/advisories/25631
- http://secunia.com/advisories/25894
- http://secunia.com/advisories/27590
- http://secunia.com/advisories/26909
- http://secunia.com/advisories/27706
- http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm
- http://secunia.com/advisories/28319
- http://osvdb.org/37271
- http://www.vupen.com/english/advisories/2007/3229
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11483
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/4.4