CVE-2007-1716 | BDVDB-2026-23177 Detail
Description#
pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/28319
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
- http://security.gentoo.org/glsa/glsa-200711-23.xml
- http://secunia.com/advisories/25894
- http://www.vupen.com/english/advisories/2007/3229
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11483
- http://www.redhat.com/support/errata/RHSA-2007-0555.html
- http://www.redhat.com/support/errata/RHSA-2007-0465.html
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823
- http://www.redhat.com/support/errata/RHSA-2007-0737.html
- http://secunia.com/advisories/26909
- http://secunia.com/advisories/27706
- http://osvdb.org/37271
- http://secunia.com/advisories/27590
- http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm
Show all 16
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.