CVE

Id
32501  
CVE No.
CVE-2008-2384  
Status
Candidate  
Description
SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.  
Phase
Assigned (20080521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
351942 32501 CVE-2008-2384 MLIST:[oss-security] 20090121 mod-auth-mysql: SQL injection  View
351943 32501 CVE-2008-2384 URL:http://openwall.com/lists/oss-security/2009/01/21/10  View
351944 32501 CVE-2008-2384 CONFIRM:http://klecker.debian.org/~white/mod-auth-mysql/CVE-2008-2384_mod-auth-mysql.patch  View
351945 32501 CVE-2008-2384 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=480238  View
351946 32501 CVE-2008-2384 FEDORA:FEDORA-2011-0100  View
351947 32501 CVE-2008-2384 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053899.html  View
351948 32501 CVE-2008-2384 FEDORA:FEDORA-2011-0114  View
351949 32501 CVE-2008-2384 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053903.html  View
351950 32501 CVE-2008-2384 REDHAT:RHSA-2009:0259  View
351951 32501 CVE-2008-2384 URL:http://www.redhat.com/support/errata/RHSA-2009-0259.html  View
351952 32501 CVE-2008-2384 REDHAT:RHSA-2010:1002  View
351953 32501 CVE-2008-2384 URL:http://www.redhat.com/support/errata/RHSA-2010-1002.html  View
351954 32501 CVE-2008-2384 BID:33392  View
351955 32501 CVE-2008-2384 URL:http://www.securityfocus.com/bid/33392  View
351956 32501 CVE-2008-2384 OVAL:oval:org.mitre.oval:def:10172  View
351957 32501 CVE-2008-2384 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10172  View
351958 32501 CVE-2008-2384 SECUNIA:43302  View
351959 32501 CVE-2008-2384 URL:http://secunia.com/advisories/43302  View
351960 32501 CVE-2008-2384 VUPEN:ADV-2009-0226  View
351961 32501 CVE-2008-2384 URL:http://www.vupen.com/english/advisories/2009/0226  View
351962 32501 CVE-2008-2384 SECUNIA:33627  View
351963 32501 CVE-2008-2384 URL:http://secunia.com/advisories/33627  View
351964 32501 CVE-2008-2384 VUPEN:ADV-2011-0367  View
351965 32501 CVE-2008-2384 URL:http://www.vupen.com/english/advisories/2011/0367  View
351966 32501 CVE-2008-2384 XF:modauthmysql-multibyte-sql-injection(48163)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49157 JVNDB-2008-004467 openSUSE の opensuse-updater における脆弱性 openSUSE の opensuse-updater には、一つずれエラー (Off-by-one) が発生するため、不特定の影響を受ける脆弱性が存在します。 CVE-2008-2388 32501 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004467.html  View