An issue exists in hwclock.13-v2.27 allows malicious users to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date.
kernel util-linux