Guiseppe Tanzilli And Matthias Eckermann: Security Vulnerabilities
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
CVSS Score
10.0
EPSS Score
0.496
Published
2005-12-31
The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.
CVSS Score
7.5
EPSS Score
0.017
Published
2001-08-29