RedHat Security Advisory RHSA-2009:0259 describes a flaw in mod_auth_mysql impacting the Apache HTTP Server which allowed remote attackers to inject arbitrary SQL commands into a login request
Reporter | Title | Published | Views | Family All 37 |
---|---|---|---|---|
![]() | [SECURITY] Fedora 14 Update: mod_auth_mysql-3.0.0-12.fc14 | 10 Feb 201121:25 | โ | fedora |
![]() | [SECURITY] Fedora 13 Update: mod_auth_mysql-3.0.0-12.fc13 | 10 Feb 201121:27 | โ | fedora |
![]() | Mandriva Linux Security Advisory : apache-mod_auth_mysql (MDVSA-2009:189-1) | 3 Aug 200900:00 | โ | nessus |
![]() | Mod_auth_mysql Multibyte Encoding SQL Injection | 22 Feb 201100:00 | โ | nessus |
![]() | Oracle Linux 5 : mod_auth_mysql (ELSA-2009-0259) | 12 Jul 201300:00 | โ | nessus |
![]() | SuSE 10 Security Update : apache2-mod_auth_mysql (ZYPP Patch Number 7683) | 13 Dec 201100:00 | โ | nessus |
![]() | Fedora 14 : mod_auth_mysql-3.0.0-12.fc14 (2011-0100) | 11 Feb 201100:00 | โ | nessus |
![]() | RHEL 5 : mod_auth_mysql (RHSA-2009:0259) | 12 Feb 200900:00 | โ | nessus |
![]() | RHEL 6 : mod_auth_mysql (RHSA-2010:1002) | 22 Dec 201000:00 | โ | nessus |
![]() | Scientific Linux Security Update : mod_auth_mysql on SL6.x i386/x86_64 | 1 Aug 201200:00 | โ | nessus |
# SPDX-FileCopyrightText: 2009 E-Soft Inc.
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.63369");
script_version("2024-03-21T05:06:54+0000");
script_tag(name:"last_modification", value:"2024-03-21 05:06:54 +0000 (Thu, 21 Mar 2024)");
script_tag(name:"creation_date", value:"2009-02-13 20:43:17 +0100 (Fri, 13 Feb 2009)");
script_cve_id("CVE-2008-2384");
script_tag(name:"cvss_base", value:"7.5");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
script_name("RedHat Security Advisory RHSA-2009:0259");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2009 E-Soft Inc.");
script_family("Red Hat Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/rhel", "ssh/login/rpms", re:"ssh/login/release=RHENT_5");
script_tag(name:"solution", value:"Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date");
script_tag(name:"summary", value:"The remote host is missing updates announced in
advisory RHSA-2009:0259.
The mod_auth_mysql package includes an extension module for the Apache HTTP
Server which can be used to implement web user authentication against a
MySQL database.
A flaw was found in the way mod_auth_mysql escaped certain
multibyte-encoded strings. If mod_auth_mysql was configured to use a
multibyte character set that allowed a backslash '\' as part of the
character encodings, a remote attacker could inject arbitrary SQL commands
into a login request. (CVE-2008-2384)
Note: This flaw only affected non-default installations where
AuthMySQLCharacterSet is configured to use one of the affected multibyte
character sets. Installations that did not use the AuthMySQLCharacterSet
configuration option were not vulnerable to this flaw.
All mod_auth_mysql users are advised to upgrade to the updated package,
which contains a backported patch to resolve this issue. After installing
the update, the httpd daemon must be restarted for the fix to take effect.");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
script_xref(name:"URL", value:"http://rhn.redhat.com/errata/RHSA-2009-0259.html");
script_xref(name:"URL", value:"http://www.redhat.com/security/updates/classification/#moderate");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
res = "";
report = "";
if ((res = isrpmvuln(pkg:"mod_auth_mysql", rpm:"mod_auth_mysql~3.0.0~3.2.el5_3", rls:"RHENT_5")) != NULL) {
report += res;
}
if ((res = isrpmvuln(pkg:"mod_auth_mysql-debuginfo", rpm:"mod_auth_mysql-debuginfo~3.0.0~3.2.el5_3", rls:"RHENT_5")) != NULL) {
report += res;
}
if (report != "") {
security_message(data:report);
} else if (__pkg_match) {
exit(99);
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo