Leon J Breedt Pam-PGSQL Remote SQL Query Manipulation Vulnerability
BID:3319
Info
Leon J Breedt Pam-PGSQL Remote SQL Query Manipulation Vulnerability
| Bugtraq ID: | 3319 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 10 2001 12:00AM |
| Updated: | Sep 10 2001 12:00AM |
| Credit: | This vulnerability was submitted to BugTraq in a RUS-CERT Advisory on September 10th, 2001. |
| Vulnerable: |
Leon J Breedt pam-pgsql 0.5.1 |
| Not Vulnerable: |
Leon J Breedt pam-pgsql 0.5.2 |
Discussion
Leon J Breedt Pam-PGSQL Remote SQL Query Manipulation Vulnerability
Leon J Breedt's 'pam-pgsql' is a PAM authentication module to be used with PostgreSQL.
'pam-pgsql' is prone to a vulnerability which will allow SQL queries to be manipulated via any medium which requires a user to authenticate(HTTP, SSH, telnet, etc). Data that is included in SQL query strings is not adequately sanitized.
It may be possible for malicious users to modify the structure of SQL queries.
This issue allows the user to access resources that would normally be restricted, which may in turn provide an opportunity for the attacker to exploit other vulnerabilities that exist in the server. The attacker may be able to exploit this issue to gain unauthorized access to the host.
Leon J Breedt's 'pam-pgsql' is a PAM authentication module to be used with PostgreSQL.
'pam-pgsql' is prone to a vulnerability which will allow SQL queries to be manipulated via any medium which requires a user to authenticate(HTTP, SSH, telnet, etc). Data that is included in SQL query strings is not adequately sanitized.
It may be possible for malicious users to modify the structure of SQL queries.
This issue allows the user to access resources that would normally be restricted, which may in turn provide an opportunity for the attacker to exploit other vulnerabilities that exist in the server. The attacker may be able to exploit this issue to gain unauthorized access to the host.
Exploit / POC
Leon J Breedt Pam-PGSQL Remote SQL Query Manipulation Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Leon J Breedt Pam-PGSQL Remote SQL Query Manipulation Vulnerability
Solution:
FreeBSD has provided a fix. The FreeBSD portcheckout utility may be used to automatically upgrade to a fixed version.
Leon J Breedt pam-pgsql 0.5.1
Solution:
FreeBSD has provided a fix. The FreeBSD portcheckout utility may be used to automatically upgrade to a fixed version.
Leon J Breedt pam-pgsql 0.5.1
-
FreeBSD portcheckout.tgz
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/Latest/ portcheckout.tgz
References
Leon J Breedt Pam-PGSQL Remote SQL Query Manipulation Vulnerability
References:
References: