RSS   Podatności dla 'Mod auth pgsql'   RSS

2005-12-31
 
CVE-2005-3656

CWE-134
 

 
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.

 
2001-08-29
 
CVE-2001-1379

 

 
The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.

 


Copyright 2024, cxsecurity.com

 

Back to Top