high7.5
CVE-2003-0040
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.
Impact
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Double Precision Incorporated | Courier Mta | Version 0.37.3 |
| Inter7 | Courier-Imap | Version 1.6 |
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2003/dsa-247
- http://www.securityfocus.com/bid/6738
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11213
- http://www.debian.org/security/2003/dsa-247
- http://www.securityfocus.com/bid/6738
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11213