Description
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | libapache2-mod-auth-pgsql | 2.0.2b1-5sarge0 | DSA-935-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | mod_auth_pgsql | 2.0.1-7.1 | RHSA-2006:0164 |
| RHEL 3 | mod_auth_pgsql | 2.0.1-4.ent.1 | RHSA-2006:0164 |
Advisories 2
- RHSA-2006:0164 Red Hat Security Advisory: mod_auth_pgsql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-935-1 libapache2-mod-auth-pgsql - format string vulnerability Debian Security (DSA / DLA) · Mar 9, 2026
References
- GLSA-200601-05 vendor-advisory
- 18321 third-party-advisory
- http://www.giuseppetanzilli.it/mod_auth_pgsql2/
- http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00016.html
- 16153 vdb-entry
- USN-239-1 vendor-advisory
- 18347 third-party-advisory
- 18304 third-party-advisory
- 2006-0002 vendor-advisory
- 18463 third-party-advisory
- 18350 third-party-advisory
- ADV-2006-0070 vdb-entry
- RHSA-2006:0164 vendor-advisory
- oval:org.mitre.oval:def:10600 vdb-entry signature
- 18517 third-party-advisory
- http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00015.html
- 1015446 vdb-entry
- 18403 third-party-advisory
- 18397 third-party-advisory
- MDKSA-2006:009 vendor-advisory
- 18348 third-party-advisory
- DSA-935 vendor-advisory
- 20060109 Multiple Vendor mod_auth_pgsql Format String Vulnerability third-party-advisory