CVE-2007-1716

Sažetak

pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.

Reference

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://osvdb.org/37271
http://secunia.com/advisories/25631
http://secunia.com/advisories/25894
http://secunia.com/advisories/26909
http://secunia.com/advisories/27590
http://secunia.com/advisories/27706
http://secunia.com/advisories/28319
http://security.gentoo.org/glsa/glsa-200711-23.xml
http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm
http://www.redhat.com/support/errata/RHSA-2007-0465.html
http://www.redhat.com/support/errata/RHSA-2007-0555.html
http://www.redhat.com/support/errata/RHSA-2007-0737.html
http://www.vupen.com/english/advisories/2007/3229
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11483

CVSS

Base:	3.4
Impact:	6.4
Exploitability:	1.2

Pristup

Vektor	Složenost	Autentikacija
LOCAL	HIGH	MULTIPLE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:L/AC:H/Au:M/C:P/I:P/A:P

Zadnje važnije ažuriranje

11-10-2017 - 01:31

Objavljeno

27-03-2007 - 22:19