Vulnerabilities (CVE)

Filtered by vendor Leon J Breedt Subscribe
Filtered by product Pam-pgsql
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1369 1 Leon J Breedt 1 Pam-pgsql 2024-02-04 7.5 HIGH N/A
Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields.
CVE-2003-0672 1 Leon J Breedt 1 Pam-pgsql 2024-02-04 7.5 HIGH N/A
Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message.