Apache mod_authnz_external: SQL injection

1. Gentoo Linux Security Advisory

Advisory Reference	GLSA 201110-23 / mod_authnz_external
Release Date	October 25, 2011
Latest Revision	October 25, 2011: 1
Impact	low
Exploitable	remote

Package	Vulnerable versions	Unaffected versions	Architecture(s)
www-apache/mod_authnz_external	< 3.2.6	>= 3.2.6	All supported architectures

Related bugreports: #386165

Synopsis

An input sanitation flaw in mod_authnz_external allows remote attacker to conduct SQL injection.

2. Impact Information

Background

mod_authnz_external is a tool for creating custom authentication backends for HTTP basic authentication.

Description

mysql/mysql-auth.pl in mod_authnz_external does not properly sanitize input before using it in an SQL query.

Impact

A remote attacker could exploit this vulnerability to inject arbitrary SQL statements by using a specially crafted username for HTTP authentication on a site using mod_authnz_external.

3. Resolution Information

Workaround

There is no known workaround at this time.

Resolution

All Apache mod_authnz_external users should upgrade to the latest version:

Code Listing 3.1: Resolution

  # emerge --sync
  # emerge --ask --oneshot --verbose
  ">=www-apache/mod_authnz_external-3.2.6"

4. References

CVE-2011-2688

Page updated October 25, 2011

Summary: This is a Gentoo Linux Security Advisory

Security Team
Contact Address

Donate to support our development efforts.