Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

libapache2-mod-authnz-external: SQL injection

Package(s):

libapache2-mod-authnz-external

CVE #(s):

CVE-2011-2688

Created:

July 19, 2011

Updated:

August 21, 2012

Description:

From the Debian advisory:

It was discovered that libapache2-mod-authnz-external, an apache authentication module, is prone to an SQL injection via the $user parameter.

Alerts:

Debian	DSA-2279-1	2011-07-19
Mageia	MGASA-2012-0231	2012-08-21

(Log in to post comments)