CVE-2005-3656

Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.

• CWE-134

• ftp://patches.sgi.com/support/free/security/advisories/20060101-01-UPatch
• http://secunia.com/advisories/18304Patch, Vendor Advisory
• http://secunia.com/advisories/18321Patch, Vendor Advisory
• http://secunia.com/advisories/18347Patch, Vendor Advisory
• http://secunia.com/advisories/18348Patch, Vendor Advisory
• http://secunia.com/advisories/18350Patch, Vendor Advisory
• http://secunia.com/advisories/18397Patch, Vendor Advisory
• http://secunia.com/advisories/18403Patch, Vendor Advisory
• http://secunia.com/advisories/18463Patch, Vendor Advisory
• http://secunia.com/advisories/18517Patch, Vendor Advisory
• http://securitytracker.com/id?1015446Patch
• http://www.debian.de/security/2006/dsa-935Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200601-05.xmlPatch, Vendor Advisory
• http://www.giuseppetanzilli.it/mod_auth_pgsql2/
• http://www.idefense.com/intelligence/vulnerabilities/display.php?id=367Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:009
• http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00015.htmlPatch
• http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00016.htmlPatch
• http://www.redhat.com/support/errata/RHSA-2006-0164.htmlPatch
• http://www.securityfocus.com/bid/16153Patch
• http://www.trustix.org/errata/2006/0002/Patch
• http://www.vupen.com/english/advisories/2006/0070
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10600
• https://usn.ubuntu.com/239-1/
• ftp://patches.sgi.com/support/free/security/advisories/20060101-01-UPatch
• http://secunia.com/advisories/18304Patch, Vendor Advisory
• http://secunia.com/advisories/18321Patch, Vendor Advisory
• http://secunia.com/advisories/18347Patch, Vendor Advisory
• http://secunia.com/advisories/18348Patch, Vendor Advisory
• http://secunia.com/advisories/18350Patch, Vendor Advisory
• http://secunia.com/advisories/18397Patch, Vendor Advisory
• http://secunia.com/advisories/18403Patch, Vendor Advisory
• http://secunia.com/advisories/18463Patch, Vendor Advisory
• http://secunia.com/advisories/18517Patch, Vendor Advisory
• http://securitytracker.com/id?1015446Patch
• http://www.debian.de/security/2006/dsa-935Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200601-05.xmlPatch, Vendor Advisory
• http://www.giuseppetanzilli.it/mod_auth_pgsql2/
• http://www.idefense.com/intelligence/vulnerabilities/display.php?id=367Patch, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:009
• http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00015.htmlPatch
• http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00016.htmlPatch
• http://www.redhat.com/support/errata/RHSA-2006-0164.htmlPatch
• http://www.securityfocus.com/bid/16153Patch
• http://www.trustix.org/errata/2006/0002/Patch
• http://www.vupen.com/english/advisories/2006/0070
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10600
• https://usn.ubuntu.com/239-1/

Published

Dec 31, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3650The CodeSupport.ocx ActiveX control, as used by Sony to unin…
• CVE-2005-3651Stack-based buffer overflow in the dissect_ospf_v3_address_p…
• CVE-2005-3652Heap-based buffer overflow in Citrix Program Neighborhood cl…
• CVE-2005-3653Heap-based buffer overflow in the iGateway service for vario…
• CVE-2005-3654Blue Coat Systems Inc. WinProxy before 6.1a allows remote at…
• CVE-2005-3655Heap-based buffer overflow in Novell Open Enterprise Server …
• CVE-2005-3657The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Sec…
• CVE-2005-3658Multiple heap-based buffer overflows in EMC Legato NetWorker…
• CVE-2005-3659nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.…
• CVE-2005-3660Linux kernel 2.4 and 2.6 allows attackers to cause a denial …
• CVE-2005-3661Dell TrueMobile 2300 Wireless Broadband Router running firmw…
• CVE-2005-3662Off-by-one buffer overflow in pnmtopng before 2.39, when usi…