CVE-2003-0672: Leon J Breedt Pam-Pgsql

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message.

Affected products

• Leon J Breedt Pam-Pgsql: version 0.5.1 only; version 0.5.2 only

Published 2003-08-27. Last modified 2026-06-16.