2 matches found
Debian DSA-469-1 : pam-pgsql - missing input sanitising
Primoz Bratanic discovered a bug in libpam-pgsql, a PAM module to authenticate using a PostgreSQL database. The library does not escape all user-supplied data that are sent to the database. An attacker could exploit this bug to insert SQL statements. %NASLMINLEVEL 70300 C Tenable Network Security...
CVE-2004-0366
Removed by vendor...