CVE-2006-7108

no score yetEPSS 0.3%

login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2007-03-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

andries_brouwer:util-linux

References

http://secunia.com/advisories/25098
http://secunia.com/advisories/25530
http://secunia.com/advisories/25692
http://secunia.com/advisories/25935
http://support.avaya.com/elmodocs2/security/ASA-2007-252.htm

Check your stack JSON