Debian Security Update DSA-6144-1 inetutils - security update

[LinuxBot]

Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root.
https://security-tracker.debian.org/tracker/DSA-6144-1

Continue reading...