Debian Security Advisory DSA 3192-1 (checkpw - security update)
Hiroya Ito of GMO Pepabo, Inc. reported that checkpw, a password authentication program, has a flaw in processing account names which contain double dashes. A remote attacker can use this flaw to cause a denial of service infinite loop. OpenVAS Vulnerability Test $Id: deb3192.nasl 6609 2017-07-07...