CVE-2007-1716

Executive Summary

Informations
Name	CVE-2007-1716	First vendor Publication	2007-03-27
Vendor	Cve	Last vendor Modification	2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:H/Au:M/C:P/I:P/A:P)
Cvss Base Score	3.4	Attack Range	Local
Cvss Impact Score	6.4	Attack Complexity	High
Cvss Expoit Score	1.2	Authentification	Requires multiple instances
Calculate full CVSS 2.0 Vectors scores

Security Protection

Impacts

Provides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1716

CWE : Common Weakness Enumeration

id	Name
CWE-708	Incorrect Ownership Assignment

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11483

Oval ID:	oval:org.mitre.oval:def:11483
Title:	pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.
Description:	pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-1716	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section pam-devel is earlier than 0:0.75-72 AND pam is earlier than 0:0.75-72 AND mkisofs is earlier than 8:2.01.0.a32-0.EL3.6 AND cdrecord is earlier than 8:2.01.0.a32-0.EL3.6 AND cdrtools is earlier than 8:2.01.0.a32-0.EL3.6 AND cdrecord-devel is earlier than 8:2.01.0.a32-0.EL3.6 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section pam-devel is earlier than 0:0.77-66.23 AND pam is earlier than 0:0.77-66.23 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section pam-devel is earlier than 0:0.99.6.2-3.26.el5 AND pam is earlier than 0:0.99.6.2-3.26.el5

CPE : Common Platform Enumeration

Type	Description	Count
Os	Redhat Enterprise Linux cpe:/o:redhat:enterprise_linux:4.4	1

Open Source Vulnerability Database (OSVDB)

id	Description
37271	pam_console Console Device Permission Restoration Weakness

Internal Sources (Detail)

Source	Url
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823
FULLDISC	http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
GENTOO	http://security.gentoo.org/glsa/glsa-200711-23.xml
OSVDB	http://osvdb.org/37271
REDHAT	http://www.redhat.com/support/errata/RHSA-2007-0465.html http://www.redhat.com/support/errata/RHSA-2007-0555.html http://www.redhat.com/support/errata/RHSA-2007-0737.html
SECUNIA	http://secunia.com/advisories/25631 http://secunia.com/advisories/25894 http://secunia.com/advisories/26909 http://secunia.com/advisories/27590 http://secunia.com/advisories/27706 http://secunia.com/advisories/28319
SGI	ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
VUPEN	http://www.vupen.com/english/advisories/2007/3229