Debian/libpam-ssh: unknown
pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for
Action: Upgrade libpam-ssh to 1.92-7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.92-7 | - |
Fixed versions
| 1.92-7 |
Sources
- osv: DEBIAN-CVE-2009-1273#Debian:14/libpam-ssh
- https://security-tracker.debian.org/tracker/CVE-2009-1273
published · modified · JSON