Security Advisory

CVE-2003-0500

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2003-07-04 04:00:00
Last updated 2024-08-08 01:58:10
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.