ByteOS Network

NVD Vulnerability Details :

CVE-2007-1716

Modified

Source-cve@mitre.org

Published At-27 Mar, 2007 | 22:19

Updated At-11 Oct, 2017 | 01:31

pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.4	LOW	AV:L/AC:H/Au:M/C:P/I:P/A:P

CPE Matches

Red Hat, Inc.

>>enterprise_linux>>4.4

cpe:2.3:o:redhat:enterprise_linux:4.4:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2007-04-09T00:00:00

Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233581 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/

References

Hyperlink	Source	Resource
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc	cve@mitre.org	N/A
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html	cve@mitre.org	N/A
http://osvdb.org/37271	cve@mitre.org	N/A
http://secunia.com/advisories/25631	cve@mitre.org	N/A
http://secunia.com/advisories/25894	cve@mitre.org	N/A
http://secunia.com/advisories/26909	cve@mitre.org	N/A
http://secunia.com/advisories/27590	cve@mitre.org	N/A
http://secunia.com/advisories/27706	cve@mitre.org	N/A
http://secunia.com/advisories/28319	cve@mitre.org	N/A
http://security.gentoo.org/glsa/glsa-200711-23.xml	cve@mitre.org	N/A
http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2007-0465.html	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2007-0555.html	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2007-0737.html	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/3229	cve@mitre.org	N/A
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11483	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History