CVE-2013-0191

libpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value
returned by the password search query, which allows remote attackers to
bypass authentication via a crafted password.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698241&gt;
• <https://sourceforge.net/p/pam-pgsql/bugs/13/&gt;