Lucene search
HistoryDec 22, 2008 - 3:30 p.m.
CVE-2008-2380
cve-2008-2380
sql injection
courier-authlib
postgres
remote attack
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
75.2%
SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes.
Affected configurations
Node
courier-mtacourtier-authlibMatch0.52
ORcourier-mtacourtier-authlibMatch0.53
ORcourier-mtacourtier-authlibMatch0.54
ORcourier-mtacourtier-authlibMatch0.55
ORcourier-mtacourtier-authlibMatch0.56
ORcourier-mtacourtier-authlibMatch0.57
ORcourier-mtacourtier-authlibMatch0.58
ORcourier-mtacourtier-authlibMatch0.59
ORcourier-mtacourtier-authlibMatch0.59.1
ORcourier-mtacourtier-authlibMatch0.59.2
ORcourier-mtacourtier-authlibMatch0.59.3
ORcourier-mtacourtier-authlibMatch0.60
ORcourier-mtacourtier-authlibMatch0.60.1
ORcourier-mtacourtier-authlibMatch0.60.2
ORcourier-mtacourtier-authlibMatch0.60.3
ORcourier-mtacourtier-authlibMatch0.60.4
ORcourier-mtacourtier-authlibMatch0.60.5
ORcourier-mtacourtier-authlibMatch0.60.6
ORcourier-mtacourtier-authlibMatch0.61.0
ORcourier-mtacourtier-authlibMatch0.61.1
Related
nessus
nessus
openSUSE 10 Security Update : courier-authlib (courier-authlib-5871)
2008-12-21 00:00:00
openSUSE Security Update : courier-authlib (courier-authlib-370)
2009-07-21 00:00:00
GLSA-200903-25 : Courier Authentication Library: SQL Injection vulnerability
2009-03-12 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200903-25 (courier-authlib)
2009-03-13 00:00:00
Gentoo Security Advisory GLSA 200903-25 (courier-authlib)
2009-03-13 00:00:00
Debian Security Advisory DSA 1688-2 (courier-authlib)
2008-12-29 00:00:00
ubuntucve
ubuntucve
CVE-2008-2380
2008-12-22 00:00:00
prion
prion
Sql injection
2008-12-22 15:30:00
nvd
nvd
CVE-2008-2380
2008-12-22 15:30:00
cvelist
cvelist
CVE-2008-2380
2008-12-22 15:00:00
seebug
seebug
Courier-AuthlibιζδΈε符ε€ηpostgres SQL注ε
₯ζΌζ΄
2008-12-22 00:00:00
debiancve
debiancve
CVE-2008-2380
2008-12-22 15:30:00
gentoo
gentoo
Courier Authentication Library: SQL Injection vulnerability
2009-03-11 00:00:00
debian
debian
[SECURITY] [DSA 1688-2] New courier-authlib packages fix regression
2008-12-22 23:18:44
[SECURITY] [DSA 1688-1] New courier-authlib packages fix SQL injection
2008-12-20 15:21:38
osv
osv
courier-authlib - SQL injection
2008-12-20 00:00:00
securityvulns
securityvulns
courier-autlib authentication library SQL injection
2008-09-07 00:00:00
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
75.2%
Related for CVE-2008-2380