Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2004-0366 Details

SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://secunia.com/advisories/11237	CVE	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/15651	CVE	Third Party AdvisoryVDB Entry
http://www.debian.org/security/2004/dsa-469	CVE	Broken LinkPatchVendor Advisory
http://www.securityfocus.com/bid/10266	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://secunia.com/advisories/11237	[email protected]	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/15651	[email protected]	Third Party AdvisoryVDB Entry
http://www.debian.org/security/2004/dsa-469	[email protected]	Broken LinkPatchVendor Advisory
http://www.securityfocus.com/bid/10266	[email protected]	Broken LinkThird Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-89	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	[email protected]

Product	Versions
pam-pgsql pam-pgsql	< 0.5.2
CPE cpe:2.3:a:pam-pgsql:pam-pgsql:::::::: Remediation No remediation found in references.

7 change records found show changes

QUICK INFO