| Package | Affected versions | Patched versions |
|---|---|---|
| pam-pgsql | = 0.5.1= 0.5.2 |
Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free