A vulnerability has been discovered in the PAM library (aka Linux-PAM) on Linux/Unix systems. It allows a malicious user to remotely perform harmful actions on a vulnerable system. Technical context : "PAM" (Pluggable Authentication Module) is an authentication modular system for UNIX systems. Technical information : This vulnerability is due to an error in "_unix_run_helper_binary" function of "pam_userdb" module which can not process passwords greater than 65536 characters. It allows a remote attacker, through sending a password greater than 65536 characters, to get the username list or to cause a partial denial of service. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3238
None
None
