← Back

Pam Pgsql

pam-pgsql

Vendor: Leon J Breedt • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Leon J Breedt
1Pam Pgsql
Apr 16, 2026
Aug 27, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log mes...Show more
Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message.Show less
1Leon J Breedt
1Pam Pgsql
Apr 16, 2026
Sep 10, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields.