Argument Injection Vulnerability in util-linux-ng by util-linux

CVE-2008-1926

Summary

The vulnerability allows remote attackers to manipulate log records by injecting arbitrary arguments into login events. This is achieved by appending an 'addr=' statement to the login name. As a result, an attacker can hide malicious activities, making it difficult for system administrators to accurately monitor user actions. The affected versions of util-linux-ng (2.14 and earlier) are particularly susceptible, posing a significant risk to system integrity and security audits.

References