Unrated severityNVD Advisory· Published Aug 29, 2001· Updated Jun 16, 2026
CVE-2001-1379
CVE-2001-1379
Description
The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.
Affected products
3cpe:2.3:a:guiseppe_tanzilli_and_matthias_eckermann:mod_auth_pgsql:0.9.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:guiseppe_tanzilli_and_matthias_eckermann:mod_auth_pgsql:0.9.5:*:*:*:*:*:*:*
- cpe:2.3:a:guiseppe_tanzilli_and_matthias_eckermann:mod_auth_pgsql:0.9.6:*:*:*:*:*:*:*
- Range: =0.9.5
Patches
Vulnerability mechanics
References
9- www.iss.net/security_center/static/7054.phpnvdPatchVendor Advisory
- ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:03.mod_auth_pgsql.ascnvd
- archives.neohapsis.com/archives/vulnwatch/2001-q3/0040.htmlnvd
- distro.conectiva.com.br/atualizacoes/nvd
- marc.infonvd
- rhn.redhat.com/errata/RHSA-2001-124.htmlnvd
- www.securityfocus.com/bid/3251nvd
- www.securityfocus.com/bid/3253nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/7059nvd
News mentions
0No linked articles in our index yet.