Description (CNA)
ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.debian.org/security/2009/dsa-1730
- http://www.openwall.com/lists/oss-security/2009/02/11/5
- http://secunia.com/advisories/34268
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:061
- http://security.gentoo.org/glsa/glsa-200903-27.xml
- http://www.openwall.com/lists/oss-security/2009/02/11/4
- http://bugs.proftpd.org/show_bug.cgi?id=3173
ADP enrichment
No English description supplied.
- http://www.debian.org/security/2009/dsa-1730
- http://www.openwall.com/lists/oss-security/2009/02/11/5
- http://secunia.com/advisories/34268
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:061
- http://security.gentoo.org/glsa/glsa-200903-27.xml
- http://www.openwall.com/lists/oss-security/2009/02/11/4
- http://bugs.proftpd.org/show_bug.cgi?id=3173