Debian Security Advisory 1203-1: Steve Rigler discovered that the PAM module for authentication against LDAP servers processes PasswordPolicyReponse control messages incorrectly, which might lead to an attacker being able to login into a suspended system account.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/51639/dsa-1203-1.txt
Source: https://packetstormsecurity.com/files/51639/Debian-Linux-Security-Advisory-1203-1.html