« Volver al listado

CVE-2008-2667

Estado: ModificadaMedia (5.1)—

SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Courier-mta — Courtier-authlib

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-2667",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-07-07T23:41:00.000",
  "references": [
    {
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=225407",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/30591",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/30967",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-200809-05.xml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.courier-mta.org/authlib/changelog.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mail-archive.com/courier-users%40lists.sourceforge.net/msg31362.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.nabble.com/courier-authlib-0.60.6-released-td17720739.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43628",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=225407",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/30591",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/30967",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-200809-05.xml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.courier-mta.org/authlib/changelog.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mail-archive.com/courier-users%40lists.sourceforge.net/msg31362.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.nabble.com/courier-authlib-0.60.6-released-td17720739.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43628",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de inyección SQL en Courier Authentication Library (también se conoce como courier-authlib) anterior a versión 0.60.6 en openSUSE de SUSE versiones 10.3 y 11.0, y otras plataformas, cuando se utilizan MySQL y un juego de caracteres non-Latin, permite a los atacantes remotos ejecutar comandos SQL arbitrarios por medio del nombre de usuario y otros vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T22:54:11.957",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "954C40B7-41B3-46D2-B3F5-2188BA3EF211"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05A17C5E-A0E8-41CF-9186-A93CF620FCD3"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.54:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D9D9346-553A-462E-99CC-038A82C6F2D8"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.55:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C78B60DA-57C9-4E8F-ACC5-3813E28B2ADC"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.56:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2417C8E8-1ED9-4E83-9BC7-B210C0AFBF64"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.57:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4DCEB5A9-0BC5-4FBE-BF27-F795367CCC36"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.58:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6130571E-C84B-48C9-86B1-415C537A6B9E"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.59:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A009E489-2DF5-47F6-B2E8-D92A0753AF4C"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.59.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2FCBA05-3939-42FC-AC2C-963B9F79E9F0"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.59.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE017547-4CD3-40EF-8942-84304196CEF8"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.59.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "673194C2-F2CB-45F9-B0AA-FB9D148FBD32"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B58E03D-2E5D-4662-B40F-54DDAFC52002"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26C43975-C21F-4635-A2B8-489401CCE2B5"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FC2BF1E-2C85-47CF-98E1-623F61ADD239"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04AA9833-06AE-4604-8F9D-387D584A8C1C"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9FF48F3-75A4-43FB-BEE2-16E52E13E72B"
            },
            {
              "criteria": "cpe:2.3:a:courier-mta:courtier-authlib:0.60.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38946F5B-9F91-45F2-A4E6-AC51800C6A14"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:suse:open_suse:10.3:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D71E02A6-5F83-46EC-88C1-687E6EB88F5F"
            },
            {
              "criteria": "cpe:2.3:o:suse:open_suse:11.0:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D36412C0-FCD1-4B2D-92E4-0CE54EEB420F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}