Approved changes feed: RSS · Atom
cpe:2.3:a:pam-mysql:pam-mysql:0.7_pre1:*:*:*:*:*:*:*part: a version: 0.7_pre1 update: *
| Vendor | Pam Mysql (e3e3db4b-88be-52c2-a415-74defad76da3) |
|---|---|
| Product | Pam Mysql (3e3354b0-ce90-5d3f-90d6-3241cd4f582b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libpam-mysql |
purl2cpe | 2026-06-01 10:16:43.725157 |
pkg:deb/ubuntu/libpam-mysql |
purl2cpe | 2026-06-01 10:16:43.725159 |
pkg:github/nigelcunningham/pam-mysql |
purl2cpe | 2026-06-01 10:16:43.725161 |
pkg:sourceforge/pam-mysql |
purl2cpe | 2026-06-01 10:16:43.725162 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-0056 |
vulnerable | 2026-06-08 04:48:45.856197 |
Details available
Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted passwords, which lead to a double free of a pointer that was created by the pam_get_item function. NOTE: this issue only occurs in certain configurations in which there are multiple PAM modules, PAM-MySQL is not evaluated first, and there are no requisite modules before PAM-MySQL.
Published: 2006-02-13T11:00:00.000Z
Updated: 2024-08-07T16:18:20.722Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.