Debian Security Advisory DSA 469-1 – Primoz Bratanic discovered a bug in libpam-psgl, a PAM module to authenticate using a PostgreSQL database. The library does not escape all user-supplied data that are sent to the database. An attacker could exploit this bug to insert SQL statements.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32974/dsa-469.txt
Source: https://packetstormsecurity.com/files/32974/dsa-469.txt.html