Auth2DB Unspecified SQL Injection Vulnerability

Bugtraq ID:	34287
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 18 2009 12:00AM
Updated:	Mar 31 2009 05:16PM
Credit:	Unknown
Vulnerable:	Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Auth2DB Auth2DB 0.2.6 Auth2DB Auth2DB 0.2.5
Not Vulnerable:	Auth2DB Auth2DB 0.2.7

Auth2DB Unspecified SQL Injection Vulnerability

Auth2DB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to Auth2DB 0.2.7 are vulnerable.

Auth2DB Unspecified SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

Auth2DB Unspecified SQL Injection Vulnerability

Solution:
Updates are available. Please see the references for details.


Debian Linux 5.0 hppa

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 ia-64

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 m68k

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 arm

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 armel

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 amd64

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 alpha

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 ia-32

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 mips

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 s/390

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 mipsel

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 powerpc

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Debian Linux 5.0 sparc

• Debian auth2db-common_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-common_ 0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-filters_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-filters _0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db-frontend_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db-fronten d_0.2.5-2+dfsg-1+lenny1_all.deb


• Debian auth2db_0.2.5-2+dfsg-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/a/auth2db/auth2db_0.2.5-2 +dfsg-1+lenny1_all.deb

Auth2DB Auth2DB 0.2.5

• Auth2DB Auth2DB 0.2.7
  http://www.auth2db.com.ar/download.php?version=0.2.7-1

Auth2DB Auth2DB 0.2.6

• Auth2DB Auth2DB 0.2.7
  http://www.auth2db.com.ar/download.php?version=0.2.7-1

Auth2DB Unspecified SQL Injection Vulnerability

References:

• Home Page (Auth2DB)