← Database

CVE-2005-3656

CRITICAL CVSS: 10.0 Published: 2005-12-31 Modified: 2026-06-16

Description

Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.

Affected Platforms

Guiseppe Tanzilli And Matthias Eckermann Mod Auth Pgsql

Weakness Type

CWE-134

References