utempter information spoofing

User supplied data is not checked before writing to utmp...