Mailutils: SQL Injection — GLSA 200506-02

GNU Mailutils is vulnerable to SQL command injection attacks.

Affected packages

Background

GNU Mailutils is a collection of mail-related utilities.

Description

When GNU Mailutils is built with the "mysql" or "postgres" USE flag, the sql_escape_string function of the authentication module fails to properly escape the "\" character, rendering it vulnerable to a SQL command injection.

Impact

A malicious remote user could exploit this vulnerability to inject SQL commands to the underlying database.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-mail/mailutils-0.6-r1"

References

• CAN-2005-1824

Release date
June 06, 2005

Latest revision
June 06, 2005: 01

Severity
normal

Exploitable
remote

Bugzilla entries

• 94824