Apache mod_auth_pgsql Multiple Format String Vulnerabilities
BID:16153
Info
Apache mod_auth_pgsql Multiple Format String Vulnerabilities
| Bugtraq ID: | 16153 |
| Class: | Input Validation Error |
| CVE: |
CVE-2005-3656 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 06 2006 12:00AM |
| Updated: | Jul 11 2006 10:33PM |
| Credit: | Discovery is credited to Sparfell. |
| Vulnerable: |
Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Secure Enterprise Linux 2.0 Redhat Fedora Core4 Redhat Fedora Core3 Redhat Fedora Core2 Redhat Fedora Core1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Desktop 4.0 Redhat Desktop 3.0 Nortel Networks VPN Router 2.0.2 b1 mod_auth_pgsql mod_auth_pgsql 2.0.1 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 |
| Not Vulnerable: | |
Discussion
Apache mod_auth_pgsql Multiple Format String Vulnerabilities
The mod_auth_pgsql module is prone to multiple format-string vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input before including it in the format-specification argument of formatted printing functions.
These issues could allow remote attackers to execute arbitrary code in the context of the webserver user and gain unauthorized access.
The mod_auth_pgsql module is prone to multiple format-string vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input before including it in the format-specification argument of formatted printing functions.
These issues could allow remote attackers to execute arbitrary code in the context of the webserver user and gain unauthorized access.
Exploit / POC
Apache mod_auth_pgsql Multiple Format String Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Apache mod_auth_pgsql Multiple Format String Vulnerabilities
Solution:
The vendor has released updates to address this issue. Please see the referenced vendor advisories for more information.
mod_auth_pgsql mod_auth_pgsql 2.0.1
Nortel Networks VPN Router 2.0.2 b1
Solution:
The vendor has released updates to address this issue. Please see the referenced vendor advisories for more information.
mod_auth_pgsql mod_auth_pgsql 2.0.1
-
Fedora Legacy mod_auth_pgsql-2.0.1-3.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mod_auth_pgsql- 2.0.1-3.1.legacy.i386.rpm -
Fedora Legacy mod_auth_pgsql-2.0.1-4.2.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mod_auth_pgsql- 2.0.1-4.2.legacy.i386.rpm -
mod_auth_pgsql mod_auth_pgsql-2.0.3.tar.gz
http://www.giuseppetanzilli.it/mod_auth_pgsql2/dist/mod_auth_pgsql-2.0 .3.tar.gz -
RedHat Fedora mod_auth_pgsql-2.0.1-6.2.i386.rpm
Fedora Core 3
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ -
RedHat Fedora mod_auth_pgsql-2.0.1-6.2.x86_64.rpm
Fedora Core 3
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ -
RedHat Fedora mod_auth_pgsql-2.0.1-8.1.i386.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ -
RedHat Fedora mod_auth_pgsql-2.0.1-8.1.ppc.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ -
RedHat Fedora mod_auth_pgsql-2.0.1-8.1.x86_64.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ -
RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-6.2.i386.rpm
Fedora Core 3
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ -
RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-6.2.x86_64.rpm
Fedora Core 3
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ -
RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-8.1.i386.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ -
RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-8.1.ppc.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ -
RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-8.1.x86_64.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
Nortel Networks VPN Router 2.0.2 b1
-
mod_auth_pgsql-2.0.3-23757U10_1cl.i386.rpm
Version 10
ftp://atualizacoes.conectiva.com.br/10/RPMS/mod_auth_pgsql-2.0.3-23757 U10_1cl.i386.rpm -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_alpha.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_amd64.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_arm.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_hppa.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_i386.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_ia64.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_m68k.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_mips.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_mipsel.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_powerpc.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_s390.deb -
Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_sparc.deb -
mod_auth_pgsql mod_auth_pgsql-2.0.3.tar.gz
http://www.giuseppetanzilli.it/mod_auth_pgsql2/dist/mod_auth_pgsql-2.0 .3.tar.gz -
Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_amd64.deb -
Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_i386.deb -
Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_powerpc.deb -
Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_amd64.deb -
Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_i386.deb -
Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_powerpc.deb -
Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_amd64.deb -
Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_i386.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_i386.deb -
Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_powerpc.deb
References
Apache mod_auth_pgsql Multiple Format String Vulnerabilities
References:
References: