high7.5
CVE-2003-0672
Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentic…
Impact
Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Leon J Breedt | Pam-Pgsql | Versions 0.5.1, 0.5.2 |