CVE-2008-2667
Published Jul 7, 2008
Last updated a year ago
Overview
- Description
- SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5.1
- Impact score
- 6.4
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-89
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "954C40B7-41B3-46D2-B3F5-2188BA3EF211"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05A17C5E-A0E8-41CF-9186-A93CF620FCD3"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D9D9346-553A-462E-99CC-038A82C6F2D8"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.55:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C78B60DA-57C9-4E8F-ACC5-3813E28B2ADC"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.56:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2417C8E8-1ED9-4E83-9BC7-B210C0AFBF64"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.57:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DCEB5A9-0BC5-4FBE-BF27-F795367CCC36"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.58:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6130571E-C84B-48C9-86B1-415C537A6B9E"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A009E489-2DF5-47F6-B2E8-D92A0753AF4C"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.59.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2FCBA05-3939-42FC-AC2C-963B9F79E9F0"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.59.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE017547-4CD3-40EF-8942-84304196CEF8"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.59.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "673194C2-F2CB-45F9-B0AA-FB9D148FBD32"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B58E03D-2E5D-4662-B40F-54DDAFC52002"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26C43975-C21F-4635-A2B8-489401CCE2B5"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FC2BF1E-2C85-47CF-98E1-623F61ADD239"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04AA9833-06AE-4604-8F9D-387D584A8C1C"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9FF48F3-75A4-43FB-BEE2-16E52E13E72B"
},
{
"criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38946F5B-9F91-45F2-A4E6-AC51800C6A14"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:suse:open_suse:10.3:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D71E02A6-5F83-46EC-88C1-687E6EB88F5F"
},
{
"criteria": "cpe:2.3:o:suse:open_suse:11.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D36412C0-FCD1-4B2D-92E4-0CE54EEB420F"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]