Login Request a demo
Unscored severity · published Apr 24, 2008
CVE-2008-1926
Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of…
–
CVSS
3.9%
EPSS
No
On KEV
Description
Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UT
Util-linux · Linux
2.13; 2.13.0.1; 2.13.1; 2.13.1.1; 2.14 · source: NVD
Affected product
UT
Util-linux
Linux
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1926
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1926
git.kernel.org
http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=blobdiff%3Bf=login-utils/login.c%3Bh=230121316d953c59e7842c1325f6e9f326a37608%3Bhp=aad27794327c60391b5148b367d2c79338fc6ee4%3Bhb=8ccf0b253ac0f4f58d64bc9674de18bff5a88782%3Bhpb=3a4a13b12a8065b0b5354686d2807cce421a9973
git.kernel.org
http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=8ccf0b253ac0f4f58d64bc9674de18bff5a88782
secunia.com
http://secunia.com/advisories/29982
secunia.com
http://secunia.com/advisories/30014
secunia.com
http://secunia.com/advisories/35161
wiki.rpath.com
http://wiki.rpath.com/Advisories:rPSA-2009-0143
More from Util-linux
–
CVE-2011-1675
mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to…
–
CVE-2011-1676
mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the…
–
CVE-2011-1677
mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors