iDefense discovered several format string flaws in the way mod_auth_pgsql logs information, which could allow unauthenticated attackers to execute malicious code with the privileges of the "apache" user, according to Red Hat.

Red Hat issued patches for the versions of the module used in Red Hat Enterprise Linux versions 3 and 4, saying it doesn't affect earlier versions. As of Monday Ubuntu, Mandriva and other vendors have also issued patches.

Red Hat and other Linux vendors gave the flaw a "critical" rating, as did advisory database maintainer FrSIRT. Secunia, which publishes a separate vulnerabilities database, gave it a "highly critical" rating.

Read this full article at TechWorld

Write Comment
Please keep the topic of messages relevant to the subject of the article. Personal verbal attacks will be deleted. Please don't use comments to plug your web site.. Such material will be removed.
Name:
Title:
Comment:
Code:*

Powered by AkoComment!