CVE-2005-3656
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 8.9%
exploitation probability
8.9%top 5% of all CVEs
observed exploitation
nono source reports it
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
Affected products
n/a · n/aReferences
ftp://patches.sgi.com/support/free/security/advisories/20060101-01-Uhttp://secunia.com/advisories/18304http://secunia.com/advisories/18321http://secunia.com/advisories/18347http://secunia.com/advisories/18348http://secunia.com/advisories/18350http://secunia.com/advisories/18397http://secunia.com/advisories/18403http://secunia.com/advisories/18463http://secunia.com/advisories/18517http://securitytracker.com/id?1015446https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10600