Description
The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sensitive data.
References
- GLSA-200404-06 vendor-advisory
- RHSA-2004:056 vendor-advisory
- VU#801526 third-party-advisory
- 20040331 OpenLinux: util-linux could leak sensitive data mailing-list
- 20040408 LNSA-#2004-0010: login may leak sensitive data mailing-list
- utillinux-information-leak(15016) vdb-entry
- 3796 vdb-entry
- 10773 third-party-advisory
- 9558 vdb-entry