CVE-2005-4713

2006-02-1311:00:00

[email protected]

web.nvd.nist.gov

cve-2005-4713

sql logging

pam-mysql

denial of service

segmentation fault

vsftpd

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7 High

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

90.0%

JSON

Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors, probably involving the pam_mysql_sql_log function when being used in vsftpd, which does not include the IP address argument to an sprintf call.

Affected configurations

NVD

Node

pam_mysqlpam_mysqlMatch0.1

pam_mysqlpam_mysqlMatch0.2

pam_mysqlpam_mysqlMatch0.3

pam_mysqlpam_mysqlMatch0.4

pam_mysqlpam_mysqlMatch0.4.7

pam_mysqlpam_mysqlMatch0.5

pam_mysqlpam_mysqlMatch0.6

pam_mysqlpam_mysqlMatch0.7_pre1

pam_mysqlpam_mysqlMatch0.7_pre2

CPENameOperatorVersion
pam_mysql:pam_mysqlpam mysqleq0.1
pam_mysql:pam_mysqlpam mysqleq0.2
pam_mysql:pam_mysqlpam mysqleq0.3
pam_mysql:pam_mysqlpam mysqleq0.4
pam_mysql:pam_mysqlpam mysqleq0.4.7
pam_mysql:pam_mysqlpam mysqleq0.5
pam_mysql:pam_mysqlpam mysqleq0.6
pam_mysql:pam_mysqlpam mysqleq0.7_pre1
pam_mysql:pam_mysqlpam mysqleq0.7_pre2

CPE	Name	Operator	Version
pam_mysql:pam_mysql	pam mysql	eq	0.1
pam_mysql:pam_mysql	pam mysql	eq	0.2
pam_mysql:pam_mysql	pam mysql	eq	0.3
pam_mysql:pam_mysql	pam mysql	eq	0.4
pam_mysql:pam_mysql	pam mysql	eq	0.4.7
pam_mysql:pam_mysql	pam mysql	eq	0.5
pam_mysql:pam_mysql	pam mysql	eq	0.6
pam_mysql:pam_mysql	pam mysql	eq	0.7_pre1
pam_mysql:pam_mysql	pam mysql	eq	0.7_pre2