CVE-2006-4041 SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors.
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pike | <= 7.6.66 | No fix listed |
| pike | = 0.4_pl8 | No fix listed |
| pike | = 0.5 | No fix listed |
| pike | = 0.6 | No fix listed |
| pike | = 7.0 | No fix listed |
| pike | = 7.2 | No fix listed |
| pike | = 7.4 | No fix listed |
| pike | = 7.4.327 | No fix listed |
| pike | = 7.4.328 | No fix listed |
| pike | = 7.6 | No fix listed |
| pike | = 7.6.36 | No fix listed |
References
- pike.ida.liu.se patch
- 20494 patch third-party-advisory vendor-advisory
- 21362 patch third-party-advisory vendor-advisory
- 22481 third-party-advisory
- GLSA-200608-10 patch vendor-advisory
- 19367 patch vdb-entry
- USN-367-1 vendor-advisory
- ADV-2006-2209 vdb-entry
- pike-sql-injection(26992) vdb-entry