CVE-2005-3656

no score yetEPSS 8.9%

Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.

EPSS: 8.9% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-134
Published: 2005-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

guiseppe_tanzilli_and_matthias_eckermann:mod_auth_pgsql

References

ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
http://secunia.com/advisories/18304
http://secunia.com/advisories/18321
http://secunia.com/advisories/18347
http://secunia.com/advisories/18348

Check your stack JSON