• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Apache mod_auth_pgsql Multiple Format String Vulnerabilities

Solution:
The vendor has released updates to address this issue. Please see the referenced vendor advisories for more information.


mod_auth_pgsql mod_auth_pgsql 2.0.1

• Fedora Legacy mod_auth_pgsql-2.0.1-3.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mod_auth_pgsql- 2.0.1-3.1.legacy.i386.rpm


• Fedora Legacy mod_auth_pgsql-2.0.1-4.2.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mod_auth_pgsql- 2.0.1-4.2.legacy.i386.rpm


• mod_auth_pgsql mod_auth_pgsql-2.0.3.tar.gz
  http://www.giuseppetanzilli.it/mod_auth_pgsql2/dist/mod_auth_pgsql-2.0 .3.tar.gz


• RedHat Fedora mod_auth_pgsql-2.0.1-6.2.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora mod_auth_pgsql-2.0.1-6.2.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora mod_auth_pgsql-2.0.1-8.1.i386.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora mod_auth_pgsql-2.0.1-8.1.ppc.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora mod_auth_pgsql-2.0.1-8.1.x86_64.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-6.2.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-6.2.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-8.1.i386.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-8.1.ppc.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/


• RedHat Fedora mod_auth_pgsql-debuginfo-2.0.1-8.1.x86_64.rpm
  Fedora Core 4
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

Nortel Networks VPN Router 2.0.2 b1

• mod_auth_pgsql-2.0.3-23757U10_1cl.i386.rpm
  Version 10
  ftp://atualizacoes.conectiva.com.br/10/RPMS/mod_auth_pgsql-2.0.3-23757 U10_1cl.i386.rpm


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_alpha.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_amd64.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_arm.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_hppa.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_i386.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_ia64.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_m68k.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_mips.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_mipsel.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_powerpc.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_s390.deb


• Debian libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/liba/libapache2-mod-auth- pgsql/libapache2-mod-auth-pgsql_2.0.2b1-5sarge0_sparc.deb


• mod_auth_pgsql mod_auth_pgsql-2.0.3.tar.gz
  http://www.giuseppetanzilli.it/mod_auth_pgsql2/dist/mod_auth_pgsql-2.0 .3.tar.gz


• Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_amd64.deb


• Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_i386.deb


• Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-2ubuntu0.1_powerpc.deb


• Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_amd64.deb


• Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_i386.deb


• Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-5ubuntu0.1_powerpc.deb


• Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_amd64.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_amd64.deb


• Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_i386.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_i386.deb


• Ubuntu libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_powerpc.deb
  Ubuntu 5.10 (Breezy Badger)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-auth-p gsql/libapache2-mod-auth-pgsql_2.0.2b1-6ubuntu0.1_powerpc.deb