NSS NSS_PostGreSQL Remote SQL Query Manipulation Vulnerability
BID:3315
Info
NSS NSS_PostGreSQL Remote SQL Query Manipulation Vulnerability
| Bugtraq ID: | 3315 |
| Class: | Input Validation Error |
| CVE: |
CVE-2001-1090 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 10 2001 12:00AM |
| Updated: | Jul 11 2009 07:56AM |
| Credit: | This vulnerability was submitted to BugTraq in a RUS-CERT Advisory on September 10th, 2001. |
| Vulnerable: |
Alessandro Gardich nss_postgresql 0.6.1 |
| Not Vulnerable: | |
Discussion
NSS NSS_PostGreSQL Remote SQL Query Manipulation Vulnerability
NSS(Name Service Switch) can use PostgreSQL as a back-end for database-based authentication.
The NSS database module 'nss_postgresql' is prone to a vulnerability which will allow SQL queries to be manipulated via any request which requires PAM authentication, regardless of the protocol used. Data that is included in SQL query strings is not adequately sanitized. It may be possible for malicious users to modify the structure of SQL queries.
It is believed that the attacker would need an interactive account on the vulnerable host to exploit this issue. Attacks will be executed on the database server as the database user that is making the query.
This issue allows the user to access resources that would normally be restricted, which may in turn provide an opportunity for the attacker to exploit other vulnerabilities that exist in the server.
NSS(Name Service Switch) can use PostgreSQL as a back-end for database-based authentication.
The NSS database module 'nss_postgresql' is prone to a vulnerability which will allow SQL queries to be manipulated via any request which requires PAM authentication, regardless of the protocol used. Data that is included in SQL query strings is not adequately sanitized. It may be possible for malicious users to modify the structure of SQL queries.
It is believed that the attacker would need an interactive account on the vulnerable host to exploit this issue. Attacks will be executed on the database server as the database user that is making the query.
This issue allows the user to access resources that would normally be restricted, which may in turn provide an opportunity for the attacker to exploit other vulnerabilities that exist in the server.
Exploit / POC
NSS NSS_PostGreSQL Remote SQL Query Manipulation Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
NSS NSS_PostGreSQL Remote SQL Query Manipulation Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
NSS NSS_PostGreSQL Remote SQL Query Manipulation Vulnerability
References:
References:
- auth postgres Homepage (Alessandro Gardich)