CVE-2005-3656 Other in n/a
Remote unauthenticated attackers can execute arbitrary code via format string vulnerabilities in the mod_auth_pgsql logging functions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-3656?
CVE-2005-3656 is a critical vulnerability in n/a, published on 6 Jan 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
Weakness: CWE-134
Which versions are affected by CVE-2005-3656?
It affects 1 product.
Linux distribution packages (16)
mod_auth_pgsql Red Hat:enterprise_linux:3::as | All versions | 0:2.0.1-4.ent.1 |
mod_auth_pgsql-debuginfo Red Hat:enterprise_linux:3::as | All versions | 0:2.0.1-4.ent.1 |
mod_auth_pgsql Red Hat:enterprise_linux:3::desktop | All versions | 0:2.0.1-4.ent.1 |
mod_auth_pgsql-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 0:2.0.1-4.ent.1 |
mod_auth_pgsql Red Hat:enterprise_linux:3::es | All versions | 0:2.0.1-4.ent.1 |
mod_auth_pgsql-debuginfo Red Hat:enterprise_linux:3::es | All versions | 0:2.0.1-4.ent.1 |
mod_auth_pgsql Red Hat:enterprise_linux:3::ws | All versions | 0:2.0.1-4.ent.1 |
mod_auth_pgsql-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 0:2.0.1-4.ent.1 |
mod_auth_pgsql Red Hat:enterprise_linux:4::as | All versions | 0:2.0.1-7.1 |
mod_auth_pgsql-debuginfo Red Hat:enterprise_linux:4::as | All versions | 0:2.0.1-7.1 |
mod_auth_pgsql Red Hat:enterprise_linux:4::desktop | All versions | 0:2.0.1-7.1 |
mod_auth_pgsql-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 0:2.0.1-7.1 |
mod_auth_pgsql Red Hat:enterprise_linux:4::es | All versions | 0:2.0.1-7.1 |
mod_auth_pgsql-debuginfo Red Hat:enterprise_linux:4::es | All versions | 0:2.0.1-7.1 |
mod_auth_pgsql Red Hat:enterprise_linux:4::ws | All versions | 0:2.0.1-7.1 |
mod_auth_pgsql-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 0:2.0.1-7.1 |
Products include Guiseppe Tanzilli and Matthias Eckermann Mod Auth Pgsql.
How do I fix CVE-2005-3656?
Upgrade to a fixed version.
Is CVE-2005-3656 being exploited?
There is no known exploitation of CVE-2005-3656 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DSA-935-1, GHSA-8p45-xmrj-4v5c, RHSA-2006:0164.