{"action":"Upgrade util-linux to 2.17.2-9 or later.","affected":[{"fixed":"2.17.2-9","introduced":"0"}],"component":"util-linux","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.17.2-9"],"id":"tcs_01M5N8QDJF8T3BN345AATS5JA2","modified_at":"2026-10-22T23:47:22.131993474Z","published_at":"2007-03-04T22:19:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2006-7108","https://security-tracker.debian.org/tracker/CVE-2006-7108"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2006-7108#Debian:14/util-linux","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2006-7108"}],"summary":"login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended ac"}