CyberSec.Space Logo
Back to CVE Browser

CVE-2001-1379

HIGH
7.5
CVSS Severity Score
EPSS Score0.1300%
EPSS Percentile4.60th
PublishedAug 29, 2001
Last ModifiedApr 16, 2026

Vulnerability Description

The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.

Affected Platforms (CPE)

📦
Guiseppe Tanzilli And Matthias Eckermann

Mod Auth Pgsql

= 0.9.5
📦
Guiseppe Tanzilli And Matthias Eckermann

Mod Auth Pgsql

= 0.9.6

References & Advisories

🔗 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:03.mod_auth_pgsql.asc
🔗 http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0040.html
🔗 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000427
🔗 http://marc.info/?l=bugtraq&m=99911895901812&w=2
🔗 http://rhn.redhat.com/errata/RHSA-2001-124.html
🔗 http://www.iss.net/security_center/static/7054.php
🔗 http://www.securityfocus.com/bid/3251
🔗 http://www.securityfocus.com/bid/3253

Related Vulnerabilities

CVE-2005-365610.0

Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication agai...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...