CVE-2000-0843: Dave Airlie Pam SMB

High severity, CVSS 10.0. EPSS: 6.5% chance of exploitation in the next 30 days.

Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name.

Affected products

• Dave Airlie Pam SMB: version 1.1.5 only
• Luke Kenneth Casson Leighton Pam Ntdom: version 0.23 only

Published 2000-11-14. Last modified 2026-06-16.