1. CVE-Search
  2. CVE-2005-4713
ID CVE-2005-4713
Summary Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors, probably involving the pam_mysql_sql_log function when being used in vsftpd, which does not include the IP address argument to an sprintf call.
References
Vulnerable Configurations
  • cpe:2.3:a:pam_mysql:pam_mysql:0.1:*:*:*:*:*:*:*
    cpe:2.3:a:pam_mysql:pam_mysql:0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:pam_mysql:pam_mysql:0.2:*:*:*:*:*:*:*
    cpe:2.3:a:pam_mysql:pam_mysql:0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:pam_mysql:pam_mysql:0.3:*:*:*:*:*:*:*
    cpe:2.3:a:pam_mysql:pam_mysql:0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:pam_mysql:pam_mysql:0.4:*:*:*:*:*:*:*
    cpe:2.3:a:pam_mysql:pam_mysql:0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:pam_mysql:pam_mysql:0.4.7:*:*:*:*:*:*:*
    cpe:2.3:a:pam_mysql:pam_mysql:0.4.7:*:*:*:*:*:*:*
  • cpe:2.3:a:pam_mysql:pam_mysql:0.5:*:*:*:*:*:*:*
    cpe:2.3:a:pam_mysql:pam_mysql:0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:pam_mysql:pam_mysql:0.6:*:*:*:*:*:*:*
    cpe:2.3:a:pam_mysql:pam_mysql:0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:pam_mysql:pam_mysql:0.7_pre1:*:*:*:*:*:*:*
    cpe:2.3:a:pam_mysql:pam_mysql:0.7_pre1:*:*:*:*:*:*:*
  • cpe:2.3:a:pam_mysql:pam_mysql:0.7_pre2:*:*:*:*:*:*:*
    cpe:2.3:a:pam_mysql:pam_mysql:0.7_pre2:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 08-03-2011 - 02:28)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 16564
confirm http://sourceforge.net/forum/forum.php?forum_id=499394
gentoo GLSA-200606-18
misc http://sourceforge.net/tracker/index.php?func=detail&aid=1256243&group_id=5741&atid=305741
secunia
  • 18598
  • 20690
vupen ADV-2006-0490
Last major update 08-03-2011 - 02:28
Published 31-12-2005 - 05:00
Last modified 08-03-2011 - 02:28
Back to Top