CVE-2004-0366

SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2004-05-04

Last modified

2024-08-08

Weaknesses

CWE-89

Affected products

• Pam-pgsql (Pam-pgsql)

References

• http://secunia.com/advisories/11237
• http://www.debian.org/security/2004/dsa-469
• http://www.securityfocus.com/bid/10266
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15651