CVE:CVE-2008-2380
CNNVD:CNNVD-200812-410
Courier-Authlib是一款 为Courier程序提供认证服务的软件。
Courier-Authlib 0.62.0之前的版本的authpgsqllib.c中存在SQL注入漏洞 ,当一个非拉丁语的locale Postgres数据库被使用时,远程攻击者可以借助包含省略符号的查询字符，执行任意SQL指令。
solution:Upgrade courier-mta courtier-authlib to a higher version than 0.52,0.53,0.54,0.55,0.56,0.57,0.58,0.59,0.59.1,0.59.2,0.59.3,0.60,0.60.1,0.60.2,0.60.3,0.60.4,0.60.5,0.60.6,0.61.0,0.61.1,and avoid the version 0.52,0.53,0.54,0.55,0.56,0.57,0.58,0.59,0.59.1,0.59.2,0.59.3,0.60,0.60.1,0.60.2,0.60.3,0.60.4,0.60.5,0.60.6,0.61.0,0.61.1