Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

auth2db: SQL injection

Package(s):

auth2db

CVE #(s):

Created:

March 30, 2009

Updated:

April 1, 2009

Description:

From the Debian advisory:

It was discovered that auth2db, an IDS logger, log viewer and alert generator, is prone to an SQL injection vulnerability, when used with multibyte character encodings.

Alerts:

Debian

DSA-1757-1

2009-03-30

(Log in to post comments)