VYPR

Mod Auth Pgsql

Sign in to watch

by Guiseppe Tanzilli And Matthias Eckermann

CVEs (2)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2005-36560.040.50Dec 31, 2005Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
CVE-2001-13790.000.02Aug 29, 2001The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.