checkpw: denial of service
| Package(s): | checkpw | CVE #(s): | CVE-2015-0885 | ||||||||
| Created: | March 17, 2015 | Updated: | March 18, 2015 | ||||||||
| Description: | From the Debian advisory:
Hiroya Ito of GMO Pepabo, Inc. reported that checkpw, a password authentication program, has a flaw in processing account names which contain double dashes. A remote attacker can use this flaw to cause a denial of service (infinite loop). | ||||||||||
| Alerts: |
| ||||||||||