mod_auth_pgsql: format string flaws [LWN.net]

Package(s):

mod_auth_pgsql

CVE #(s):

CVE-2005-3656

Created:

January 6, 2006

Updated:

February 28, 2006

Description:

The mod_auth_pgsql package is an httpd module that allows user authentication against information stored in a PostgreSQL database. Several format string flaws were found in the way mod_auth_pgsql logs information. It may be possible for a remote attacker to execute arbitrary code as the 'apache' user if mod_auth_pgsql is used for user authentication.

Alerts:

Fedora-Legacy	FLSA:177326	2006-02-27
Gentoo	200601-05	2006-01-10
Debian	DSA-935-1	2006-01-10
Mandriva	MDKSA-2006:009	2006-01-06
Ubuntu	USN-239-1	2006-01-09
Red Hat	RHSA-2006:0164-01	2006-01-05

(Log in to post comments)