pam: fixing stack overflow (CVE-2011-3148) and DoS (CVE-2011-3149) (important)

2011-11-02T22:08:18
ID OPENSUSE-SU-2011:1204-1
Type suse
Reporter Suse
Modified 2011-11-02T22:08:18

Description

The pam_env module is vulnerable to a stack overflow (CVE-2011-3148) and a DoS condition (CVE-2011-3149) when parsing users .pam_environment files.