The pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "libpam-doc": "1.1.8-1ubuntu2.1", "libpam-modules-bin": "1.1.8-1ubuntu2.1", "libpam-runtime": "1.1.8-1ubuntu2.1", "libpam-cracklib": "1.1.8-1ubuntu2.1", "libpam0g-dbgsym": "1.1.8-1ubuntu2.1", "libpam-modules-dbgsym": "1.1.8-1ubuntu2.1", "libpam0g-dev": "1.1.8-1ubuntu2.1", "libpam-modules-bin-dbgsym": "1.1.8-1ubuntu2.1", "libpam0g": "1.1.8-1ubuntu2.1", "libpam-modules": "1.1.8-1ubuntu2.1", "libpam-cracklib-dbgsym": "1.1.8-1ubuntu2.1" } ] }