Back
CVE-2008-1926
Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to…
- 7.5HighCVSS base score
- 3.9%Exploitation in 30 daysEPSS · top 9.7% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."
Timeline
ID reserved
By redhat
Published
- 16 years later
· 16 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | High7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 3.9% · top 9.7% of all CVEs (11 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Affected products
n/a
- affected n/a
References
References15
- 30014 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 29982 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=8ccf0b253ac0f4f58d64bc9674de18bff5a88782 (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://wiki.rpath.com/Advisories:rPSA-2009-0143 (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=blobdiff%3Bf=login-utils/login.c%3Bh=230121316d953c59e7842c1325f6e9f326a37608%3Bhp=aad27794327c60391b5148b367d2c79338fc6ee4%3Bhb=8ccf0b253ac0f4f58d64bc9674de18bff5a88782%3Bhpb=3a4a13b12a8065b0b5354686d2807cce421a9973 (opens in a new tab)x_refsource_MISCx_transferred
- ADV-2008-1392 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- utillinuxng-login-data-manipulation(41987) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 1022256 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- MDVSA-2008:114 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
- 20091112 rPSA-2009-0143-1 util-linux util-linux-extras (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 28983 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- oval:org.mitre.oval:def:9833 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
- 35161 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- FEDORA-2008-3419 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- RHSA-2009:0981 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2008-1926 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2008-1926)Record last updated .