This bug was fixed in the package pam-pgsql - 0.6.3-0ubuntu1.7.10.1
---------------
pam-pgsql (0.6.3-0ubuntu1.7.10.1) gutsy-security; urgency=low
* SECURITY UPDATE: local users may bypass authentication and gain
privileges by sending <CTRL-C> at the password prompt.
* pam_pgsql.c: applied Debian patch to fix operator precedence
(Fixes LP: #242690)
* pam_get_service.c: applied Debian patch from 0.6.3-2 to fix FTBFS
* References
CVE-2008-2516
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481970
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=441679
-- Thierry Carrez <[EMAIL PROTECTED]> Wed, 25 Jun 2008
19:26:46 +0000
--
<Ctrl+C> might allow to bypass authentication
https://bugs.launchpad.net/bugs/242690
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
