CVE-2005-3656 Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to....
HighCVSS 10.0
EPSS 8.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| guiseppe tanzilli and matthias eckermann mod auth pgsql | <= 2.0.3 | No fix listed |
| guiseppe tanzilli and matthias eckermann mod auth pgsql | = 0.9.5 | No fix listed |
| guiseppe tanzilli and matthias eckermann mod auth pgsql | = 0.9.6 | No fix listed |
References
- 18304 patch third-party-advisory vendor-advisory
- 18321 patch third-party-advisory vendor-advisory
- 18347 patch third-party-advisory vendor-advisory
- 18348 patch third-party-advisory vendor-advisory
- 18350 patch third-party-advisory vendor-advisory
- 18397 patch third-party-advisory vendor-advisory
- 18403 patch third-party-advisory vendor-advisory
- 18463 patch third-party-advisory vendor-advisory
- 18517 patch third-party-advisory vendor-advisory
- 1015446 patch vdb-entry
- DSA-935 patch vendor-advisory
- GLSA-200601-05 patch vendor-advisory
- www.giuseppetanzilli.it
- 20060109 Multiple Vendor mod_auth_pgsql Format String Vulnerability patch third-party-advisory vendor-advisory
- MDKSA-2006:009 vendor-advisory
- www.redhat.com patch
- www.redhat.com patch
- RHSA-2006:0164 patch vendor-advisory
- 16153 patch vdb-entry
- 2006-0002 patch vendor-advisory
- ADV-2006-0070 vdb-entry
- oval:org.mitre.oval:def:10600 signature vdb-entry
- USN-239-1 vendor-advisory