Beveiligingsadvies

CVE-2003-0672

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2003-08-14 04:00:00
Laatst bijgewerkt 2024-09-17 02:06:32
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message.