CVE Vulnerabilities

CVE-2001-1089

Published: Sep 10, 2001 | Modified: Oct 10, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.

Affected Software

Name Vendor Start Version End Version
Nss_postgresql Alessandro_gardich 0.6.1 (including) 0.6.1 (including)
Libnss-pgsql Joerg_wendland 0.9.0 (including) 0.9.0 (including)

References