CVE-2005-4713 Denial of service in n/a
Remote attackers can cause a denial of service via segmentation fault in PAM-MySQL's SQL logging facility when used with vsftpd.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-4713?
CVE-2005-4713 is a medium-severity denial of service vulnerability in n/a, published on 13 Feb 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors, probably involving the pam_mysql_sql_log function when being used in vsftpd, which does not include the IP address argument to an sprintf call.
Which versions are affected by CVE-2005-4713?
It affects 1 product.
Products include Pam Mysql Pam Mysql.
How do I fix CVE-2005-4713?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2005-4713 being exploited?
There is no known exploitation of CVE-2005-4713 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2005-4713, GHSA-c4xx-wp4h-934r.