Red Hat Security AdvisoryRHSA-2007:0737
pam security, bug fix, and enhancement update
Released 2007-11-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 pam-0.77-66.23, pam-0.77-66.23.i386, pam-0.77-66.23.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 pam-0.77-66.23, pam-0.77-66.23.i386, pam-devel-0.77-66.23 +1
- Red Hat Enterprise Linux ES version 4 pam-0.77-66.23, pam-0.77-66.23.i386, pam-0.77-66.23.ia64 +3
- Red Hat Enterprise Linux WS version 4 pam-0.77-66.23, pam-0.77-66.23.i386, pam-0.77-66.23.ia64 +3
Fixes 2 records
Priority LOW 25
Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafte…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02342 · Published 2007-10-18 · Fixed
Priority LOW 16
pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.
CVSS 2.0LOW 3.4· Local · Low privileges · Interaction — · EPSS 0.00311 · Published 2007-03-27 · Fixed
