Approved changes feed: RSS · Atom

cpe:2.3:a:pam_mysql:pam_mysql:0.1:*:*:*:*:*:*:*

part: a version: 0.1 update: *

VendorPam Mysql (518e8271-5828-5131-a5c9-a3b3def9dfd4)
ProductPam Mysql (b715de23-1122-5a26-b281-292085b5695a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/nigelcunningham/pam-mysql purl2cpe 2026-06-01 10:11:43.614332
pkg:sourceforge/pam-mysql purl2cpe 2026-06-01 10:11:43.614335

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4713 vulnerable 2026-06-08 04:48:44.842577 Details available
Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors, probably involving the pam_mysql_sql_log function when being used in vsftpd, which does not include the IP address argument to an sprintf call.
Published: 2006-02-13T11:00:00.000Z
Updated: 2024-08-07T23:53:28.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0957 vulnerable 2026-06-08 04:45:19.019035 Details available
The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.
Published: 2001-01-22T05:00:00.000Z
Updated: 2024-08-08T05:37:31.676Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.