Red Hat Security AdvisoryRHSA-2007:0465
pam security and bug fix update
Released 2007-06-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 cdrecord-8:2.01.0.a32-0.EL3.6, cdrecord-8:2.01.0.a32-0.EL3.6.i386, cdrecord-devel-8:2.01.0.a32-0.EL3.6 +8
- Red Hat Enterprise Linux AS version 3 cdrecord-8:2.01.0.a32-0.EL3.6, cdrecord-8:2.01.0.a32-0.EL3.6.i386, cdrecord-8:2.01.0.a32-0.EL3.6.ia64 +18
- Red Hat Enterprise Linux ES version 3 cdrecord-8:2.01.0.a32-0.EL3.6, cdrecord-8:2.01.0.a32-0.EL3.6.i386, cdrecord-8:2.01.0.a32-0.EL3.6.ia64 +13
- Red Hat Enterprise Linux WS version 3 cdrecord-8:2.01.0.a32-0.EL3.6, cdrecord-8:2.01.0.a32-0.EL3.6.i386, cdrecord-8:2.01.0.a32-0.EL3.6.ia64 +13
Fixes 2 records
Priority LOW 16
pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.
CVSS 2.0LOW 3.4· Local · Low privileges · Interaction — · EPSS 0.00311 · Published 2007-03-27 · Fixed
Priority LOW 11
Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00413 · Published 2004-09-24 · Fixed
