VULNERABILITY INTELLIGENCE
CVE-2005-3656
CVSS score10 HIGH
EPSS probability8.90%
CISA KEVNot currently listed
Published2005-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.
Weakness classification
- CWE-134: Use of Externally-Controlled Format String
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch
- cve@mitre.org — Patch, Vendor Advisory