Lucene search

K
cvelistMitreCVELIST:CVE-2009-0887
HistoryMar 12, 2009 - 3:00 p.m.

CVE-2009-0887

2009-03-1215:00:00
mitre
raw.githubusercontent.com
1

6.1 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.0%

Integer signedness error in the _pam_StrTok function in libpam/pam_misc.c in Linux-PAM (aka pam) 1.0.3 and earlier, when a configuration file contains non-ASCII usernames, might allow remote attackers to cause a denial of service, and might allow remote authenticated users to obtain login access with a different user’s non-ASCII username, via a login attempt.

6.1 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.0%