CVE-2007-1716

pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.

Link	Resource
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://security.gentoo.org/glsa/glsa-200711-23.xml
http://www.redhat.com/support/errata/RHSA-2007-0465.html
http://www.redhat.com/support/errata/RHSA-2007-0555.html
http://www.redhat.com/support/errata/RHSA-2007-0737.html
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
http://secunia.com/advisories/25631
http://secunia.com/advisories/25894
http://secunia.com/advisories/27590
http://secunia.com/advisories/26909
http://secunia.com/advisories/27706
http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm
http://secunia.com/advisories/28319
http://osvdb.org/37271
http://www.vupen.com/english/advisories/2007/3229
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11483

Configuration 1

cpe:2.3:o:redhat:enterprise_linux:4.4:*:*:*:*:*:*:*

---

Published : 2007-03-27 10:19

Updated : 2017-10-11 01:31

---

NVD link : CVE-2007-1716

Mitre link : CVE-2007-1716

No products.

CWE-708

Incorrect Ownership Assignment