CVE-2003-0040

Description

SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.

Affected products

• double_precision_incorporated / courier_mta0.37.3 – 0.37.3
• inter7 / courier-imap1.6 – 1.6

References

• VENDOR_ADVISORYhttp://www.debian.org/security/2003/dsa-247
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/11213
• MISChttp://www.securityfocus.com/bid/6738