Fixed in Feisty by merging this change from Debian:
pam (0.79-3.2) unstable; urgency=low
* Non-maintainer upload to fix important bug, that makes passwd segfault
when CTRL-D is pressed at the password prompt. Applied the patch
provided by Dann Frazier. (Closes: #360657)
-- Margarita Manterola <[EMAIL PROTECTED]> Sat, 5 Aug 2006 02:11:22
-0300
I don't think this is a security issue, as you can't get an arbitrary
pointer in there - all you can do is make it dereference a null pointer,
which will immediately raise SIGSEGV.
** Changed in: pam (Ubuntu)
Assignee: (unassigned) => Colin Watson
Status: Confirmed => Fix Released
--
/usr/bin/passwd crashes with a segmentation fault if given null input
https://launchpad.net/bugs/59730
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
