Description
The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.
References
- 3251 vdb-entry
- RHSA-2001:124 vendor-advisory
- 20010829 RUS-CERT Advisory 2001-08:01 mailing-list
- 20010829 [VulnWatch] RUS-CERT Advisory 2001-08:01 mailing-list
- CLA-2001:427 vendor-advisory
- 3253 vdb-entry
- apache-postgresql-authentication-module(7054) vdb-entry
- apache-postgresqlsys-authentication-module(7059) vdb-entry