Description
pam_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one user logs out, which might allow local users to gain privileges.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | pam +1 | 0.99.6.2-3.26.el5 | RHSA-2007:0555 |
| RHEL 4 | pam +1 | 0.77-66.23 | RHSA-2007:0737 |
| RHEL 3 | mkisofs +3 | 8:2.01.0.a32-0.EL3.6 | RHSA-2007:0465 |
| RHEL 3 | pam +1 | 0.75-72 | RHSA-2007:0465 |
Advisories 3
- RHSA-2007:0555 Red Hat Security Advisory: pam security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0737 Red Hat Security Advisory: pam security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0465 Red Hat Security Advisory: pam security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 28319 third-party-advisory
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player mailing-list
- GLSA-200711-23 vendor-advisory
- 25894 third-party-advisory
- ADV-2007-3229 vdb-entry
- oval:org.mitre.oval:def:11483 vdb-entry signature
- RHSA-2007:0555 vendor-advisory
- RHSA-2007:0465 vendor-advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230823
- RHSA-2007:0737 vendor-advisory
- 26909 third-party-advisory
- 27706 third-party-advisory
- 37271 vdb-entry
- 27590 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm
- 25631 third-party-advisory