CVE-2009-0887

Priority
Description
Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c
in Linux-PAM (aka pam) 1.0.3 and earlier, when a configuration file
contains non-ASCII usernames, might allow remote attackers to cause a
denial of service, and might allow remote authenticated users to obtain
login access with a different user's non-ASCII username, via a login
attempt.
Notes
More Information

Updated: 2019-12-05 20:53:02 UTC (commit 0aa5e7c87c8b55d2ec5c7f4ca1179cf75de91961)