Approved changes feed: RSS · Atom

cpe:2.3:a:andries_brouwer:util-linux:2.11i:*:*:*:*:*:*:*

part: a version: 2.11i update: *

VendorAndries Brouwer (972c5fbe-6385-53f3-b328-d49c3bf5aaeb)
ProductUtil Linux (2d755adf-b00b-5f56-ac9a-632276ef4de9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/util-linux purl2cpe 2026-06-01 10:12:45.513220
pkg:deb/ubuntu/util-linux purl2cpe 2026-06-01 10:12:45.513222
pkg:github/util-linux/util-linux purl2cpe 2026-06-01 10:12:45.513224
pkg:rpm/fedora/util-linux purl2cpe 2026-06-01 10:12:45.513225
pkg:rpm/opensuse/util-linux purl2cpe 2026-06-01 10:12:45.513226

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-1147 vulnerable 2026-06-08 04:45:21.520437 Details available
The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.
Published: 2002-06-25T04:00:00.000Z
Updated: 2024-08-08T04:44:08.106Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.