Description
libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
References
- 20010910 RUS-CERT Advisory 2001-09:01 mailing-list
- postgresql-nss-authentication-modules(7111) vdb-entry
- 3314 vdb-entry