CVE-2012-1502

Name of the Vulnerable Software and Affected Versions PyPam versions 0.5.0 and earlier

Description A double free issue in the PyPAM conv function in PAMmodule.c allows remote attackers to cause a denial of service, potentially leading to application crashes, or possibly execute arbitrary code. This can be achieved by including a NULL byte in a password string.

Recommendations For PyPam versions 0.5.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.