CVE-2003-0500

None

CVSS

—

EPSS

18.3%

Published

Aug 7, 2003

CISA due date

—

The record

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.

Affected packages

Ecosystem	Package	Introduced	Fixed
Debian:3.0	proftpd	0	1.2.4+1.2.5rc1-5woody2