Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2006-7108

login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.

  • Published: Mar 4, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-7108
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.1
  • AV:L/AC:M/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
andries_brouwer / util-linux 2.12a 2.12a.x