| ID | CVE-2009-0887 | ||||||
| Sažetak | Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam) 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with a different user's non-ASCII username, via a login attempt. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:L/AC:M/Au:S/C:C/I:C/A:C | ||||||
| Zadnje važnije ažuriranje | 07-11-2023 - 02:03 | ||||||
| Objavljeno | 12-03-2009 - 15:20 |
