CVE-2008-2667: Courier-MTA Courtier-Authlib

Medium severity, CVSS 5.1. EPSS: 1.5% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors.

Affected products

• Courier-MTA Courtier-Authlib: version 0.52 only; version 0.53 only; version 0.54 only; version 0.55 only; version 0.56 only; version 0.57 only; …

Published 2008-07-07. Last modified 2026-06-16.