CVE-2003-0672

Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-08-27

Last modified

2024-09-17

Affected products

• Pam-pgsql (Leon J Breedt)

References

• http://www.debian.org/security/2003/dsa-370