NVD

Id
69294  
Name
CVE-2005-3656  
Description
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2005-12-31  
Modified Date
2011-03-07  
Seq
2005-3656  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
358330 69294 CVE-2005-3656 20060101-01-U  View
358331 69294 CVE-2005-3656 oval:org.mitre.oval:def:10600  View
358332 69294 CVE-2005-3656 1015446  View
358333 69294 CVE-2005-3656 DSA-935  View
358334 69294 CVE-2005-3656 GLSA-200601-05  View
358335 69294 CVE-2005-3656 http://www.giuseppetanzilli.it/mod%5Fauth%5Fpgsql2/  View
358336 69294 CVE-2005-3656 20060109 Multiple Vendor mod_auth_pgsql Format String Vulnerability  View
358337 69294 CVE-2005-3656 MDKSA-2006:009  View
358338 69294 CVE-2005-3656 http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00015.html  View
358339 69294 CVE-2005-3656 http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00016.html  View
358340 69294 CVE-2005-3656 RHSA-2006:0164  View
358341 69294 CVE-2005-3656 16153  View
358342 69294 CVE-2005-3656 2006-0002  View
358343 69294 CVE-2005-3656 USN-239-1  View
358344 69294 CVE-2005-3656 ADV-2006-0070  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57810 JVNDB-2006-000006 mod_auth_pgsql のロギング処理におけるフォーマットストリングの脆弱性 mod_auth_pgsql のロギング処理には、エラーメッセージの出力処理を行う ap_log_rerror() 関数など、複数の箇所においてフォーマットストリングの脆弱性が存在します。 CVE-2005-3656 14858 CVE-2005-3656 69294 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000006.html 2006-01-05 2007-04-01 View