SQL Injection Vulnerability in ProFTPD's PostgreSQL Authentication Module

CVE-2003-0500

What is CVE-2003-0500?

A SQL injection vulnerability exists in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD versions prior to 1.2.9rc1. This flaw allows remote attackers to exploit the authentication mechanism by crafting malicious USER names, potentially executing arbitrary SQL commands. The exploitation can lead to unauthorized privilege escalation or theft of sensitive information, such as user credentials, thus undermining the integrity and security of the affected systems.

References