CVE-2009-0887

Priority
Description
Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c
in Linux-PAM (aka pam) 1.0.3 and earlier, when a configuration file
contains non-ASCII usernames, might allow remote attackers to cause a
denial of service, and might allow remote authenticated users to obtain
login access with a different user's non-ASCII username, via a login
attempt.
Notes
More Information

Updated: 2020-09-10 01:11:09 UTC (commit 81a23a978c4436cd99e1d040e9e73e9146876281)