• info
• discussion
• exploit
• solution
• references

Leon J Breedt Pam-PGSQL Remote SQL Injection Vulnerability

Solution:
Debian has issued fixes.


Leon J Breedt pam-pgsql 0.5.1

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_hppa.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_hppa.deb


• Debian libpam-pgsql_0.5.2-3woody2_i386.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_i386.deb


• Debian libpam-pgsql_0.5.2-3woody2_ia64.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_ia64.deb


• Debian libpam-pgsql_0.5.2-3woody2_m68k.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_m68k.deb


• Debian libpam-pgsql_0.5.2-3woody2_mips.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mips.deb


• Debian libpam-pgsql_0.5.2-3woody2_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mipsel.deb


• Debian libpam-pgsql_0.5.2-3woody2_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_powerpc.deb


• Debian libpam-pgsql_0.5.2-3woody2_s390.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_s390.deb


• Debian libpam-pgsql_0.5.2-3woody2_sparc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_sparc.deb

Leon J Breedt pam-pgsql 0.5.2

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_hppa.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_hppa.deb


• Debian libpam-pgsql_0.5.2-3woody2_i386.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_i386.deb


• Debian libpam-pgsql_0.5.2-3woody2_ia64.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_ia64.deb


• Debian libpam-pgsql_0.5.2-3woody2_m68k.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_m68k.deb


• Debian libpam-pgsql_0.5.2-3woody2_mips.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mips.deb


• Debian libpam-pgsql_0.5.2-3woody2_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mipsel.deb


• Debian libpam-pgsql_0.5.2-3woody2_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_powerpc.deb


• Debian libpam-pgsql_0.5.2-3woody2_s390.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_s390.deb


• Debian libpam-pgsql_0.5.2-3woody2_sparc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_sparc.deb

Leon J Breedt pam-pgsql 0.5.2 -7

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_hppa.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_hppa.deb


• Debian libpam-pgsql_0.5.2-3woody2_i386.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_i386.deb


• Debian libpam-pgsql_0.5.2-3woody2_ia64.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_ia64.deb


• Debian libpam-pgsql_0.5.2-3woody2_m68k.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_m68k.deb


• Debian libpam-pgsql_0.5.2-3woody2_mips.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mips.deb


• Debian libpam-pgsql_0.5.2-3woody2_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mipsel.deb


• Debian libpam-pgsql_0.5.2-3woody2_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_powerpc.deb


• Debian libpam-pgsql_0.5.2-3woody2_s390.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_s390.deb


• Debian libpam-pgsql_0.5.2-3woody2_sparc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_sparc.deb

Debian Linux 3.0 hppa

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_hppa.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_hppa.deb

Debian Linux 3.0 ppc

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_powerpc.deb

Debian Linux 3.0 s/390

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_s390.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_s390.deb

Debian Linux 3.0

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_hppa.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_hppa.deb


• Debian libpam-pgsql_0.5.2-3woody2_i386.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_i386.deb


• Debian libpam-pgsql_0.5.2-3woody2_ia64.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_ia64.deb


• Debian libpam-pgsql_0.5.2-3woody2_m68k.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_m68k.deb


• Debian libpam-pgsql_0.5.2-3woody2_mips.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mips.deb


• Debian libpam-pgsql_0.5.2-3woody2_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mipsel.deb


• Debian libpam-pgsql_0.5.2-3woody2_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_powerpc.deb


• Debian libpam-pgsql_0.5.2-3woody2_s390.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_s390.deb


• Debian libpam-pgsql_0.5.2-3woody2_sparc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_sparc.deb

Debian Linux 3.0 arm

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb

Debian Linux 3.0 alpha

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb

Debian Linux 3.0 mips

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_mips.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mips.deb

Debian Linux 3.0 ia-32

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_i386.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_i386.deb

Debian Linux 3.0 mipsel

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_mipsel.deb

Debian Linux 3.0 sparc

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_sparc.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_sparc.deb

Debian Linux 3.0 m68k

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_m68k.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_m68k.deb

Debian Linux 3.0 ia-64

• Debian libpam-pgsql_0.5.2-3woody2_alpha.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_alpha.deb


• Debian libpam-pgsql_0.5.2-3woody2_arm.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_arm.deb


• Debian libpam-pgsql_0.5.2-3woody2_ia64.deb
  http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_ 0.5.2-3woody2_ia64.deb