CVE-2009-0543
- State
- Published
- Severity
- Not scored
- Published
- Feb 12, 2009
- Updated
- Aug 7, 2024
- Reserved
- Feb 12, 2009
Description
ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-1730vendor-advisory
- [oss-security] 20090211 Re: CVE request for proftpdmailing-list
- 34268third-party-advisory
- MDVSA-2009:061vendor-advisory
- GLSA-200903-27vendor-advisory
- [oss-security] 20090211 CVE request for proftpdmailing-list
- http://bugs.proftpd.org/show_bug.cgi?id=3173
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.