CVE-2006-7108

login in util-linux-2.12a skips pamacctmgmt and chauthtok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pamacctmgmt and chauthtok...

CVE-2006-7108

CVE-2006-7108 relates to util-linux (2.12a and later) where the login path can bypass authentication checks by skipping pam_acct_mgmt and pam_chauthtok when authentication is skipped (for example after Kerberos krlogin). Public advisories (RHSA-2007:0235, MDKSA-2007:111, CESA-2007:0235) describe ...

CVE-2006-7108

login in util-linux-2.12a skips pamacctmgmt and chauthtok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pamacctmgmt and chauthtok...