Courier-Authlib Non-Latin Character Handling SQL Injection Vulnerability

Bugtraq ID:	29605
Class:	Input Validation Error
CVE:	CVE-2008-2667
Remote:	Yes
Local:	No
Published:	Jun 09 2008 12:00AM
Updated:	Dec 30 2008 04:52PM
Credit:	Christian Hoffmann
Vulnerable:	S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Gentoo net-libs/courier-authlib 0.60.5 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Courier Mail Server Courier-Authlib 0.60.5
Not Vulnerable:	Courier Mail Server Courier-Authlib 0.60.6

Courier-Authlib Non-Latin Character Handling SQL Injection Vulnerability

Courier-Authlib is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to Courier-Authlib 0.60.6 are vulnerable; other versions may also be affected.

Courier-Authlib Non-Latin Character Handling SQL Injection Vulnerability

Attackers can exploit this issue through a web browser.

Courier-Authlib Non-Latin Character Handling SQL Injection Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian courier-authdaemon_0.58-4+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_amd64.deb


• Debian courier-authdaemon_0.58-4+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_amd64.deb


• Debian courier-authlib-dev_0.58-4+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_amd64.deb


• Debian courier-authlib-dev_0.58-4+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_amd64.deb


• Debian courier-authlib-ldap_0.58-4+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_amd64.deb


• Debian courier-authlib-ldap_0.58-4+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_amd64.deb


• Debian courier-authlib-mysql_0.58-4+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_amd64.deb


• Debian courier-authlib-mysql_0.58-4+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_amd64.deb


• Debian courier-authlib-pipe_0.58-4+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_amd64.deb


• Debian courier-authlib-pipe_0.58-4+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_amd64.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_amd64.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_amd64.deb


• Debian courier-authlib-userdb_0.58-4+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_amd64.deb


• Debian courier-authlib-userdb_0.58-4+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_amd64.deb


• Debian courier-authlib_0.58-4+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_amd64.deb


• Debian courier-authlib_0.58-4+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_amd64.deb

Debian Linux 4.0 ia-32

• Debian courier-authdaemon_0.58-4+etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_i386.deb


• Debian courier-authdaemon_0.58-4+etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_i386.deb


• Debian courier-authlib-dev_0.58-4+etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_i386.deb


• Debian courier-authlib-dev_0.58-4+etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_i386.deb


• Debian courier-authlib-ldap_0.58-4+etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_i386.deb


• Debian courier-authlib-ldap_0.58-4+etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_i386.deb


• Debian courier-authlib-mysql_0.58-4+etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_i386.deb


• Debian courier-authlib-mysql_0.58-4+etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_i386.deb


• Debian courier-authlib-pipe_0.58-4+etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_i386.deb


• Debian courier-authlib-pipe_0.58-4+etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_i386.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_i386.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_i386.deb


• Debian courier-authlib-userdb_0.58-4+etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_i386.deb


• Debian courier-authlib-userdb_0.58-4+etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_i386.deb


• Debian courier-authlib_0.58-4+etch2_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_i386.deb


• Debian courier-authlib_0.58-4+etch3_i386.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_i386.deb

Debian Linux 4.0 arm

• Debian courier-authdaemon_0.58-4+etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_arm.deb


• Debian courier-authlib-dev_0.58-4+etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_arm.deb


• Debian courier-authlib-ldap_0.58-4+etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_arm.deb


• Debian courier-authlib-mysql_0.58-4+etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_arm.deb


• Debian courier-authlib-pipe_0.58-4+etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_arm.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_arm.deb


• Debian courier-authlib-userdb_0.58-4+etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_arm.deb


• Debian courier-authlib_0.58-4+etch2_arm.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_arm.deb

Debian Linux 4.0 hppa

• Debian courier-authdaemon_0.58-4+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_hppa.deb


• Debian courier-authdaemon_0.58-4+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_hppa.deb


• Debian courier-authlib-dev_0.58-4+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_hppa.deb


• Debian courier-authlib-dev_0.58-4+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_hppa.deb


• Debian courier-authlib-ldap_0.58-4+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_hppa.deb


• Debian courier-authlib-ldap_0.58-4+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_hppa.deb


• Debian courier-authlib-mysql_0.58-4+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_hppa.deb


• Debian courier-authlib-mysql_0.58-4+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_hppa.deb


• Debian courier-authlib-pipe_0.58-4+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_hppa.deb


• Debian courier-authlib-pipe_0.58-4+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_hppa.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_hppa.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_hppa.deb


• Debian courier-authlib-userdb_0.58-4+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_hppa.deb


• Debian courier-authlib-userdb_0.58-4+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_hppa.deb


• Debian courier-authlib_0.58-4+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_hppa.deb


• Debian courier-authlib_0.58-4+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_hppa.deb

Debian Linux 4.0 sparc

• Debian courier-authdaemon_0.58-4+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_sparc.deb


• Debian courier-authdaemon_0.58-4+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_sparc.deb


• Debian courier-authlib-dev_0.58-4+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_sparc.deb


• Debian courier-authlib-dev_0.58-4+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_sparc.deb


• Debian courier-authlib-ldap_0.58-4+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_sparc.deb


• Debian courier-authlib-ldap_0.58-4+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_sparc.deb


• Debian courier-authlib-mysql_0.58-4+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_sparc.deb


• Debian courier-authlib-mysql_0.58-4+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_sparc.deb


• Debian courier-authlib-pipe_0.58-4+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_sparc.deb


• Debian courier-authlib-pipe_0.58-4+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_sparc.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_sparc.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_sparc.deb


• Debian courier-authlib-userdb_0.58-4+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_sparc.deb


• Debian courier-authlib-userdb_0.58-4+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_sparc.deb


• Debian courier-authlib_0.58-4+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_sparc.deb


• Debian courier-authlib_0.58-4+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_sparc.deb

Debian Linux 4.0 s/390

• Debian courier-authdaemon_0.58-4+etch2_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_s390.deb


• Debian courier-authdaemon_0.58-4+etch3_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_s390.deb


• Debian courier-authlib-dev_0.58-4+etch2_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_s390.deb


• Debian courier-authlib-dev_0.58-4+etch3_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_s390.deb


• Debian courier-authlib-ldap_0.58-4+etch2_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_s390.deb


• Debian courier-authlib-ldap_0.58-4+etch3_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_s390.deb


• Debian courier-authlib-mysql_0.58-4+etch2_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_s390.deb


• Debian courier-authlib-mysql_0.58-4+etch3_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_s390.deb


• Debian courier-authlib-pipe_0.58-4+etch2_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_s390.deb


• Debian courier-authlib-pipe_0.58-4+etch3_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_s390.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_s390.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_s390.deb


• Debian courier-authlib-userdb_0.58-4+etch2_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_s390.deb


• Debian courier-authlib-userdb_0.58-4+etch3_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_s390.deb


• Debian courier-authlib_0.58-4+etch2_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_s390.deb


• Debian courier-authlib_0.58-4+etch3_s390.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_s390.deb

Debian Linux 4.0 powerpc

• Debian courier-authdaemon_0.58-4+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_powerpc.deb


• Debian courier-authdaemon_0.58-4+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_powerpc.deb


• Debian courier-authlib-dev_0.58-4+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_powerpc.deb


• Debian courier-authlib-dev_0.58-4+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_powerpc.deb


• Debian courier-authlib-ldap_0.58-4+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_powerpc.deb


• Debian courier-authlib-ldap_0.58-4+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_powerpc.deb


• Debian courier-authlib-mysql_0.58-4+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_powerpc.deb


• Debian courier-authlib-mysql_0.58-4+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_powerpc.deb


• Debian courier-authlib-pipe_0.58-4+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_powerpc.deb


• Debian courier-authlib-pipe_0.58-4+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_powerpc.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_powerpc.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_powerpc.deb


• Debian courier-authlib-userdb_0.58-4+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_powerpc.deb


• Debian courier-authlib-userdb_0.58-4+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_powerpc.deb


• Debian courier-authlib_0.58-4+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_powerpc.deb


• Debian courier-authlib_0.58-4+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_powerpc.deb

Debian Linux 4.0 alpha

• Debian courier-authdaemon_0.58-4+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_alpha.deb


• Debian courier-authdaemon_0.58-4+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_alpha.deb


• Debian courier-authlib-dev_0.58-4+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_alpha.deb


• Debian courier-authlib-dev_0.58-4+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_alpha.deb


• Debian courier-authlib-ldap_0.58-4+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_alpha.deb


• Debian courier-authlib-ldap_0.58-4+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_alpha.deb


• Debian courier-authlib-mysql_0.58-4+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_alpha.deb


• Debian courier-authlib-mysql_0.58-4+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_alpha.deb


• Debian courier-authlib-pipe_0.58-4+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_alpha.deb


• Debian courier-authlib-pipe_0.58-4+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_alpha.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_alpha.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_alpha.deb


• Debian courier-authlib-userdb_0.58-4+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_alpha.deb


• Debian courier-authlib-userdb_0.58-4+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_alpha.deb


• Debian courier-authlib_0.58-4+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_alpha.deb


• Debian courier-authlib_0.58-4+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_alpha.deb

Debian Linux 4.0 mipsel

• Debian courier-authdaemon_0.58-4+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_mipsel.deb


• Debian courier-authdaemon_0.58-4+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_mipsel.deb


• Debian courier-authlib-dev_0.58-4+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_mipsel.deb


• Debian courier-authlib-dev_0.58-4+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_mipsel.deb


• Debian courier-authlib-ldap_0.58-4+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_mipsel.deb


• Debian courier-authlib-ldap_0.58-4+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_mipsel.deb


• Debian courier-authlib-mysql_0.58-4+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_mipsel.deb


• Debian courier-authlib-mysql_0.58-4+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_mipsel.deb


• Debian courier-authlib-pipe_0.58-4+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_mipsel.deb


• Debian courier-authlib-pipe_0.58-4+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_mipsel.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_mipsel.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_mipsel.deb


• Debian courier-authlib-userdb_0.58-4+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_mipsel.deb


• Debian courier-authlib-userdb_0.58-4+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_mipsel.deb


• Debian courier-authlib_0.58-4+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_mipsel.deb


• Debian courier-authlib_0.58-4+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_mipsel.deb

Debian Linux 4.0 ia-64

• Debian courier-authdaemon_0.58-4+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_ia64.deb


• Debian courier-authdaemon_0.58-4+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_ia64.deb


• Debian courier-authlib-dev_0.58-4+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_ia64.deb


• Debian courier-authlib-dev_0.58-4+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_ia64.deb


• Debian courier-authlib-ldap_0.58-4+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_ia64.deb


• Debian courier-authlib-ldap_0.58-4+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_ia64.deb


• Debian courier-authlib-mysql_0.58-4+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_ia64.deb


• Debian courier-authlib-mysql_0.58-4+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_ia64.deb


• Debian courier-authlib-pipe_0.58-4+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_ia64.deb


• Debian courier-authlib-pipe_0.58-4+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_ia64.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_ia64.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_ia64.deb


• Debian courier-authlib-userdb_0.58-4+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_ia64.deb


• Debian courier-authlib-userdb_0.58-4+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_ia64.deb


• Debian courier-authlib_0.58-4+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_ia64.deb


• Debian courier-authlib_0.58-4+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_ia64.deb

Debian Linux 4.0 mips

• Debian courier-authdaemon_0.58-4+etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch2_mips.deb


• Debian courier-authdaemon_0.58-4+etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authdaemon_0.58-4+etch3_mips.deb


• Debian courier-authlib-dev_0.58-4+etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch2_mips.deb


• Debian courier-authlib-dev_0.58-4+etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-dev_0.58-4+etch3_mips.deb


• Debian courier-authlib-ldap_0.58-4+etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch2_mips.deb


• Debian courier-authlib-ldap_0.58-4+etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-ldap_0.58-4+etch3_mips.deb


• Debian courier-authlib-mysql_0.58-4+etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch2_mips.deb


• Debian courier-authlib-mysql_0.58-4+etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-mysql_0.58-4+etch3_mips.deb


• Debian courier-authlib-pipe_0.58-4+etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch2_mips.deb


• Debian courier-authlib-pipe_0.58-4+etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-pipe_0.58-4+etch3_mips.deb


• Debian courier-authlib-postgresql_0.58-4+etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch2_mips.deb


• Debian courier-authlib-postgresql_0.58-4+etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-postgresql_0.58-4+etch3_mips.deb


• Debian courier-authlib-userdb_0.58-4+etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch2_mips.deb


• Debian courier-authlib-userdb_0.58-4+etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib-userdb_0.58-4+etch3_mips.deb


• Debian courier-authlib_0.58-4+etch2_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch2_mips.deb


• Debian courier-authlib_0.58-4+etch3_mips.deb
  http://security.debian.org/pool/updates/main/c/courier-authlib/courier -authlib_0.58-4+etch3_mips.deb

Courier Mail Server Courier-Authlib 0.60.5

• Courier Mail Server courier-authlib-0.60.6.tar.bz2
  http://prdownloads.sourceforge.net/courier/courier-authlib-0.60.6.tar. bz2

Courier-Authlib Non-Latin Character Handling SQL Injection Vulnerability

References:

• [courier-users] courier-authlib 0.60.6 released (Sam Varshavchik )
  
• Vendor Homepage (Courier)