Description
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | pear/auth | < 1.2.4 | 1.2.4 | GHSA-76rh-xv36-9mrc |
| Packagist | pear/auth | >= 1.3.0r1, < 1.3.0r4 | 1.3.0r4 | GHSA-76rh-xv36-9mrc |
References
- http://pear.php.net/package/Auth/download/1.3.0r4
- 1015666 vdb-entry
- 20060222 Multiple Injection Vulnerabilities in PHP PEAR::Auth Module mailing-list
- auth-multiple-injections(24854) vdb-entry
- 19301 third-party-advisory
- ADV-2006-0696 vdb-entry
- GLSA-200603-13 vendor-advisory
- http://pear.php.net/package/Auth/download/1.2.4
- 19008 third-party-advisory
- 16758 vdb-entry