CVE-2005-1824

The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used…

published June 2, 2005

CVSS
—
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01080 · 64.6th percentile
Published
2005-06-02T04:00Z
EPSS history
Timeline
  • 02 JUN 04:00Z
    The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used…
    cvelistv5