CVE-2005-3656: Guiseppe Tanzilli And Matthias Eckermann Mod Auth Pgsql

High severity, CVSS 10.0. EPSS: 8.9% chance of exploitation in the next 30 days.

Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.

Affected products

• Guiseppe Tanzilli And Matthias Eckermann Mod Auth Pgsql: up to and including 2.0.3; version 0.9.5 only; version 0.9.6 only

Published 2005-12-31. Last modified 2026-06-16.