CVE-2007-1716
Published Mar 27, 2007
Last updated 7 years ago
Overview
- Description
- pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 3.4
- Impact score
- 6.4
- Exploitability score
- 1.2
- Vector string
- AV:L/AC:H/Au:M/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Vendor comments
- Red HatRed Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233581 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29202FE0-F778-4A55-98CF-19C48C503DB0"
}
],
"operator": "OR"
}
]
}
]