Vulnerability in Leon J Breedt Pam-Pgsql

CVE-2001-1369

Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields.

EPSS: 0.016 (74.1th percentile) — read the EPSS interpretation.

Affected products

Leon_j_breedt Pam-pgsql — versions 0.5.1, 0.5.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)