CVE-2007-1716

Published: Mar 27, 2007Modified: Apr 23, 2026

3.4

Vector

AV:L/AC:H/Au:M/C:P/I:P/A:P

Exploitability: 1.2 / Impact: 6.4

Source: NVD

Description

pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.

Affected (1)

Products: Redhat: Enterprise Linux

Redhat

1 product

Enterprise Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 4.4

References (34)

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc (unsafe URL)

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html

Source: cve@mitre.org

http://osvdb.org/37271

Source: cve@mitre.org

http://secunia.com/advisories/25631

Source: cve@mitre.org

http://secunia.com/advisories/25894

Source: cve@mitre.org

http://secunia.com/advisories/26909

Source: cve@mitre.org

http://secunia.com/advisories/27590

Source: cve@mitre.org

http://secunia.com/advisories/27706

Source: cve@mitre.org

http://secunia.com/advisories/28319

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200711-23.xml

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0465.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0555.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0737.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3229

Source: cve@mitre.org

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11483

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc (unsafe URL)