CVE-2003-0672

CVE-2003-0672 describes a format string vulnerability in pam-pgsql versions 0.5.2 and earlier. This flaw allows remote attackers to execute arbitrary code by crafting a malicious username during authentication, which is then improperly processed when logging the event. With a CVSS score of 7.5, this vulnerability is considered high severity, enabling an unauthenticated attacker to achieve partial confidentiality, integrity, and availability impacts over the network with low attack complexity. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.