Security Advisory
CVE-2013-0191
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
libpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value returned by the password search query, which allows remote attackers to bypass authentication via a crafted password.