EUVD-2006-2821

Malware in sbrugna...

Design/Logic Flaw

Logicalware MailManager before 2.0.10 does not remove 0xc8 0x27 0xc8 followed by a single-quote character from the data stream to the server, which allows remote attackers to modify data and gain administrative access when PostgreSQL is used, aka "bug 1494281 - Postgres encoding security hole."...

CVE-2006-2824

CVE-2006-2824 affects Logicalware MailManager prior to 2.0.10. The issue stems from MailManager’s PostgreSQL interface not removing the 0xC8 0x27 sequence (0xC8 followed by a single-quote) in data sent to the server, enabling a remote attacker to modify data and potentially gain administrative ac...

CVE-2006-2824

Logicalware MailManager before 2.0.10 does not remove 0xc8 0x27 0xc8 followed by a single-quote character from the data stream to the server, which allows remote attackers to modify data and gain administrative access when PostgreSQL is used, aka "bug 1494281 - Postgres encoding security hole."...