33 matches found
RHSA-2010:1002 Red Hat Security Advisory: mod_auth_mysql security update
Bulletin has no description...
SUSE CVE-2008-2384
SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ backslash as part of the character encoding, allows remote attackers to execute arbitrary SQL...
Oracle: Security Advisory (ELSA-2009-0259)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2010-1002)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 6 : mod_auth_mysql (ELSA-2010-1002)
The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-1002 advisory. 1:3.0.0-11.1 - add security fix for CVE-2008-2384 663617 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
Oracle Linux 5 : mod_auth_mysql (ELSA-2009-0259)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-0259 advisory. 3.0.0-3.2 - add security fix for CVE-2008-2384 480613 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...
Scientific Linux Security Update : mod_auth_mysql on SL6.x i386/x86_64
A flaw was found in the way modauthmysql escaped certain multibyte-encoded strings. If modauthmysql was configured to use a multibyte character set that allowed a backslash '' as part of the character encodings, a remote attacker could inject arbitrary SQL commands into a login request...
Scientific Linux Security Update : mod_auth_mysql on SL5.x i386/x86_64
A flaw was found in the way modauthmysql escaped certain multibyte-encoded strings. If modauthmysql was configured to use a multibyte character set that allowed a backslash '' as part of the character encodings, a remote attacker could inject arbitrary SQL commands into a login request...
SuSE 10 Security Update : apache2-mod_auth_mysql (ZYPP Patch Number 7683)
This update of apache2-modauthmysql fixes a possible SQL injection vulnerability that can be exploited using multibyte character encoding. CVE-2008-2384: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N: SQL Injection. CWE-89 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...
Mod_auth_mysql Multibyte Encoding SQL Injection
There is a SQL injection vulnerability in this installation of modauthmysql that may allow an attacker access to restricted areas of a website. Successful attacks have only been demonstrated against sites with AuthMySQLCharacterSet set to big5, gbk, and sjis but other encodings may be affected...
Fedora 13 : mod_auth_mysql-3.0.0-12.fc13 (2011-0114)
This update fixes a security issue in modauthmysql. A flaw was found in the way modauthmysql escaped certain multibyte-encoded strings. If modauthmysql was configured to use a multibyte character set that allowed a backslash '' as part of the character encodings, a remote attacker could inject...
Fedora Update for mod_auth_mysql FEDORA-2011-0114
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for mod_auth_mysql FEDORA-2011-0100
Check for the Version of modauthmysql OpenVAS Vulnerability Test Fedora Update for modauthmysql FEDORA-2011-0100 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for mod_auth_mysql FEDORA-2011-0114
Check for the Version of modauthmysql OpenVAS Vulnerability Test Fedora Update for modauthmysql FEDORA-2011-0114 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora 14 : mod_auth_mysql-3.0.0-12.fc14 (2011-0100)
This update fixes a security issue in modauthmysql. A flaw was found in the way modauthmysql escaped certain multibyte-encoded strings. If modauthmysql was configured to use a multibyte character set that allowed a backslash '' as part of the character encodings, a remote attacker could inject...
Fedora Update for mod_auth_mysql FEDORA-2011-0100
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[SECURITY] Fedora 14 Update: mod_auth_mysql-3.0.0-12.fc14
modauthmysql can be used to limit access to documents served by a web server by checking data in a MySQL database...
mod_auth_mysql security update
1:3.0.0-11.1 - add security fix for CVE-2008-2384 663617...
RHEL 6 : mod_auth_mysql (RHSA-2010:1002)
An updated modauthmysql package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
Moderate: Red Hat Security Advisory: mod_auth_mysql security update
An updated modauthmysql package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...