CVE-2003-0500 SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing aut...
HighCVSS 10.0
EPSS 18.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| proftpd project proftpd | = 1.2.9_rc1 | No fix listed |
References
- 20030618 SQL Inject in ProFTPD login against Postgresql using mod_sql mailing-list
- DSA-338 patch vendor-advisory