CVEvulnerability
CVE-2007-1716
3.4 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-03-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.4 LOW — AV:L/AC:H/Au:M/C:P/I:P/A:P
Description
pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.
Affected configurations
• redhat enterprise linux 4.4
Related
Referenced by CWE · observed example (1)
- CWE-708 Incorrect Ownership Assignment weakness
References
- ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc patches.sgi.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html lists.grok.org.uk
- http://osvdb.org/37271 osvdb.org
- http://secunia.com/advisories/25631 secunia.com
- http://secunia.com/advisories/25894 secunia.com
- http://secunia.com/advisories/26909 secunia.com
- http://secunia.com/advisories/27590 secunia.com
- http://secunia.com/advisories/27706 secunia.com
- http://secunia.com/advisories/28319 secunia.com
- http://security.gentoo.org/glsa/glsa-200711-23.xml security.gentoo.org
- http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm support.avaya.com
- http://www.redhat.com/support/errata/RHSA-2007-0465.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0555.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0737.html www.redhat.com
- http://www.vupen.com/english/advisories/2007/3229 www.vupen.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11483 oval.cisecurity.org
- ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc patches.sgi.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html lists.grok.org.uk
- http://osvdb.org/37271 osvdb.org
- http://secunia.com/advisories/25631 secunia.com
- http://secunia.com/advisories/25894 secunia.com
- http://secunia.com/advisories/26909 secunia.com
- http://secunia.com/advisories/27590 secunia.com
- http://secunia.com/advisories/27706 secunia.com
- http://secunia.com/advisories/28319 secunia.com
- http://security.gentoo.org/glsa/glsa-200711-23.xml security.gentoo.org
- http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm support.avaya.com
- http://www.redhat.com/support/errata/RHSA-2007-0465.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0555.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0737.html www.redhat.com
- http://www.vupen.com/english/advisories/2007/3229 www.vupen.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11483 oval.cisecurity.org