CVE

Id
32497  
CVE No.
CVE-2008-2380  
Status
Candidate  
Description
SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes.  
Phase
Assigned (20080521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
351831 32497 CVE-2008-2380 CONFIRM:http://www.courier-mta.org/authlib/changelog.html  View
351832 32497 CVE-2008-2380 GENTOO:GLSA-200903-25  View
351833 32497 CVE-2008-2380 URL:http://security.gentoo.org/glsa/glsa-200903-25.xml  View
351834 32497 CVE-2008-2380 BID:32926  View
351835 32497 CVE-2008-2380 URL:http://www.securityfocus.com/bid/32926  View
351836 32497 CVE-2008-2380 OSVDB:50811  View
351837 32497 CVE-2008-2380 URL:http://osvdb.org/50811  View
351838 32497 CVE-2008-2380 SECUNIA:33235  View
351839 32497 CVE-2008-2380 URL:http://secunia.com/advisories/33235  View
351840 32497 CVE-2008-2380 SECUNIA:34234  View
351841 32497 CVE-2008-2380 URL:http://secunia.com/advisories/34234  View
351842 32497 CVE-2008-2380 XF:courier-library-postgres-sql-injection(47494)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40054 JVNDB-2009-001060 Apache HTTP Server の mod-auth-mysql モジュールにおける SQL インジェクションの脆弱性 Apache HTTP Server の mod-auth-mysql モジュールには、マルチバイト文字のエンコード処理に不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2008-2384 32497 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001060.html  View