CVE-2006-7108
published 2007-03-04CVE-2006-7108: login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established…
PriorityP415medium4.1CVSS 2.0
AVLACMAuSCPIPAP
EPSS
0.34%
26.0th percentile
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| andries_brouwer | util-linux | — | — |
| debian | util-linux | < util-linux 2.17.2-9 (bookworm) | util-linux 2.17.2-9 (bookworm) |
| kernel | util-linux | >= 0 < 2.17.2-9 | 2.17.2-9 |
| kernel | util-linux | >= 0 < 2.17.2-9 | 2.17.2-9 |
| kernel | util-linux | >= 0 < 2.17.2-9 | 2.17.2-9 |
| kernel | util-linux | >= 0 < 2.17.2-9 | 2.17.2-9 |
CVSS provenance
nvdv2.04.1MEDIUMAV:L/AC:M/Au:S/C:P/I:P/A:P
osv4.1MEDIUM
vendor_debian4.1LOW
vendor_redhat4.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2006-01-09·CVSS 4.1
CVE-2006-7108 [MEDIUM] security flaw
security flaw
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.
Statement: Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
This flaw has been rated as having a low severity by the Red Hat Security Response Team. More information about this rating can be found here:
http://www.redhat.com/security/updates/classification/
This flaw is currently being tracked via the following bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=231449
https://bugzilla.redhat.com/show_bug.cgi?id=231448
The risks associated with fixing this bug are gr
Debian
CVE-2006-7108: util-linux - login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication...
vendor_debian·2006·CVSS 4.1
CVE-2006-7108 [MEDIUM] CVE-2006-7108: util-linux - login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication...
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.
Scope: local
bookworm: resolved (fixed in 2.17.2-9)
bullseye: resolved (fixed in 2.17.2-9)
forky: resolved (fixed in 2.17.2-9)
sid: resolved (fixed in 2.17.2-9)
trixie: resolved (fixed in 2.17.2-9)
GHSA
GHSA-224c-qxxc-fqx7: login in util-linux-2
ghsa_unreviewed·2022-05-01
CVE-2006-7108 [MEDIUM] GHSA-224c-qxxc-fqx7: login in util-linux-2
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.
OSV
CVE-2006-7108: login in util-linux-2
osv·2007-03-04·CVSS 4.1
CVE-2006-7108 [MEDIUM] CVE-2006-7108: login in util-linux-2
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2006-7108 security flaw
bugzilla·2018-08-16·CVSS 4.1
CVE-2006-7108 [MEDIUM] CVE-2006-7108 security flaw
CVE-2006-7108 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.
---
Statement:
Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
This flaw has been rated as having a low severity by the Red Hat Security Response Team. More information about this rating can be found here:
http://www.redhat.com/security/updates/classification/
This flaw is currently bein
Bugzilla
CVE-2006-7108 login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
bugzilla·2007-03-08·CVSS 4.1
CVE-2006-7108 [MEDIUM] CVE-2006-7108 login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
CVE-2006-7108 login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
+++ This bug was initially created as a clone of Bug #177331 +++
Description of problem:
login omits pam_acct_mgmt & chauth_tok when authentication is skipped.
Authentication may be skipped, for example, during krlogin because Kerberos
already took care of it. The problem with skipping pam_acct_mgmt is that it
allows users to use the system when maybe they should not be allowed, such that
if they have a Kerberos ticket, the other checks do not apply.
If a user had to use password authentication, pam_acct_mgmt may reject the user
for several reasons: not allowed to use the system at this time, not allowed to
use this system, user's account has been disabled, etc. Why should these tests
be skipped just
Bugzilla
CVE-2006-7108 login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
bugzilla·2007-03-08·CVSS 4.1
CVE-2006-7108 [MEDIUM] CVE-2006-7108 login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
CVE-2006-7108 login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
+++ This bug was initially created as a clone of Bug #231448 +++
Description of problem:
login omits pam_acct_mgmt & chauth_tok when authentication is skipped.
Authentication may be skipped, for example, during krlogin because Kerberos
already took care of it. The problem with skipping pam_acct_mgmt is that it
allows users to use the system when maybe they should not be allowed, such that
if they have a Kerberos ticket, the other checks do not apply.
If a user had to use password authentication, pam_acct_mgmt may reject the user
for several reasons: not allowed to use the system at this time, not allowed to
use this system, user's account has been disabled, etc. Why should these tests
be skipped just
Bugzilla
CVE-2006-7108 login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
bugzilla·2006-01-09·CVSS 4.1
CVE-2006-7108 [MEDIUM] CVE-2006-7108 login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
CVE-2006-7108 login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
Description of problem:
login omits pam_acct_mgmt & chauth_tok when authentication is skipped.
Authentication may be skipped, for example, during krlogin because Kerberos
already took care of it. The problem with skipping pam_acct_mgmt is that it
allows users to use the system when maybe they should not be allowed, such that
if they have a Kerberos ticket, the other checks do not apply.
If a user had to use password authentication, pam_acct_mgmt may reject the user
for several reasons: not allowed to use the system at this time, not allowed to
use this system, user's account has been disabled, etc. Why should these tests
be skipped just because the user has a ticket?
Same with pam_chauthtok: the user
http://secunia.com/advisories/25098http://secunia.com/advisories/25530http://secunia.com/advisories/25692http://secunia.com/advisories/25935http://support.avaya.com/elmodocs2/security/ASA-2007-252.htmhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:111http://www.redhat.com/support/errata/RHSA-2007-0235.htmlhttp://www.securityfocus.com/bid/24321https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=177331https://issues.rpath.com/browse/RPL-1359https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9689http://secunia.com/advisories/25098http://secunia.com/advisories/25530http://secunia.com/advisories/25692http://secunia.com/advisories/25935http://support.avaya.com/elmodocs2/security/ASA-2007-252.htmhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:111http://www.redhat.com/support/errata/RHSA-2007-0235.htmlhttp://www.securityfocus.com/bid/24321https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=177331https://issues.rpath.com/browse/RPL-1359https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9689
2007-03-04
Published