CVE-2006-7108: Andries Brouwer Util-Linux

Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days.

login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.

Affected products

Published 2007-03-04. Last modified 2026-06-16.