CVE-2003-0040

SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-02-19

Last modified

2024-08-08

Affected products

• Courier Mta (Double Precision Incorporated)
• Courier-imap (Inter7)

References

• http://www.debian.org/security/2003/dsa-247
• http://www.securityfocus.com/bid/6738
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11213