Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-2667

Опубликовано: 07 июл. 2008
Источник: nvd
CVSS2: 5.1
EPSS Низкий

Описание

SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:courier-mta:courtier-authlib:0.52:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.53:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.54:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.55:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.56:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.57:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.58:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.59:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.59.1:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.59.2:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.59.3:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.60:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.60.1:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.60.2:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.60.3:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.60.4:*:*:*:*:*:*:*
cpe:2.3:a:courier-mta:courtier-authlib:0.60.5:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:suse:open_suse:10.3:*:*:*:*:*:*:*
cpe:2.3:o:suse:open_suse:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 81%
0.01583
Низкий

5.1 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

ubuntu логотип

CVE-2008-2667

ubuntu
больше 17 лет назад

SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors.

debian логотип

CVE-2008-2667

debian
больше 17 лет назад

SQL injection vulnerability in the Courier Authentication Library (aka ...

github логотип

GHSA-3r5f-vjfp-r32c

github
почти 4 года назад

SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors.

EPSS

Процентиль: 81%
0.01583
Низкий

5.1 Medium

CVSS2

Дефекты

CWE-89