Red Hat Security AdvisoryRHSA-2007:0235
util-linux security and bug fix update
Released 2007-05-01 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 util-linux-2.12a-16.EL4.25, util-linux-2.12a-16.EL4.25.i386, util-linux-2.12a-16.EL4.25.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 util-linux-2.12a-16.EL4.25, util-linux-2.12a-16.EL4.25.i386
- Red Hat Enterprise Linux ES version 4 util-linux-2.12a-16.EL4.25, util-linux-2.12a-16.EL4.25.i386, util-linux-2.12a-16.EL4.25.ia64
- Red Hat Enterprise Linux WS version 4 util-linux-2.12a-16.EL4.25, util-linux-2.12a-16.EL4.25.i386, util-linux-2.12a-16.EL4.25.ia64
Fixes 1 record
Priority LOW 19
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that w…
CVSS 2.0MEDIUM 4.1· Local · Low privileges · Interaction — · EPSS 0.00348 · Published 2007-03-04 · Fixed CWE-264
