CVE-2003-0500
SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.
- Score
- CVSS 2.0 10.0 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2003-08-07
- Last modified
- 2024-08-08
Affected products
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005826.html
- http://www.debian.org/security/2003/dsa-338
