CVE-2008-2384: SQL Injection

Published Jan 15, 2009
·
Updated

Martin Joey Schulze discovered a flaw in the way modauthmysql handles certain multibyte character encodings.

If modauthmysql is configured to use use a multibyte character set that allows the backslash '\' character as part of the character encodings, it is possible to inject arbitrary SQL commands to the MySQL database server.

Other sources

SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.

Affected Software

60 affected components
Joey Schulze Mod Auth Mysql
Apache HTTP Server
Apache HTTP Server=2.0
Apache HTTP Server=2.0.9
Apache HTTP Server=2.0.28
Apache HTTP Server=2.0.28-beta
Apache HTTP Server=2.0.28-beta
Apache HTTP Server=2.0.32
Apache HTTP Server=2.0.32-beta
Apache HTTP Server=2.0.32-beta
Apache HTTP Server=2.0.34-beta
Apache HTTP Server=2.0.34-beta
Apache HTTP Server=2.0.35
Apache HTTP Server=2.0.36
Apache HTTP Server=2.0.37
Apache HTTP Server=2.0.38
Apache HTTP Server=2.0.39
Apache HTTP Server=2.0.40
Apache HTTP Server=2.0.41
Apache HTTP Server=2.0.42
Apache HTTP Server=2.0.43
Apache HTTP Server=2.0.44
Apache HTTP Server=2.0.45
Apache HTTP Server=2.0.46
Apache HTTP Server=2.0.46
Apache HTTP Server=2.0.47
Apache HTTP Server=2.0.48
Apache HTTP Server=2.0.49
Apache HTTP Server=2.0.50
Apache HTTP Server=2.0.51
Apache HTTP Server=2.0.52
Apache HTTP Server=2.0.53
Apache HTTP Server=2.0.54
Apache HTTP Server=2.0.55
Apache HTTP Server=2.0.56
Apache HTTP Server=2.0.57
Apache HTTP Server=2.0.58
Apache HTTP Server=2.0.58
Apache HTTP Server=2.0.59
Apache HTTP Server=2.0.60
Apache HTTP Server=2.0.61
Apache HTTP Server=2.1
Apache HTTP Server=2.1.1
Apache HTTP Server=2.1.2
Apache HTTP Server=2.1.3
Apache HTTP Server=2.1.4
Apache HTTP Server=2.1.5
Apache HTTP Server=2.1.6
Apache HTTP Server=2.1.7
Apache HTTP Server=2.1.8
Apache HTTP Server=2.2
Apache HTTP Server=2.2.0
Apache HTTP Server=2.2.1
Apache HTTP Server=2.2.2
Apache HTTP Server=2.2.2
Apache HTTP Server=2.2.3
Apache HTTP Server=2.2.3
Apache HTTP Server=2.2.4
Apache HTTP Server=2.2.6
Apache HTTP Server=2.3.0

Event History

Jan 15, 2009
Data Sourced
via Red Hat·08:39 PM
DescriptionSeverityAffected Software
Jan 22, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2008-2384?

CVE-2008-2384 is considered a high severity vulnerability due to its potential to allow SQL injection.

2

How do I fix CVE-2008-2384?

To fix CVE-2008-2384, update to a patched version of mod_auth_mysql that addresses the multibyte character encoding flaw.

3

What impact does CVE-2008-2384 have?

CVE-2008-2384 may allow attackers to execute arbitrary SQL queries, compromising database integrity and security.

4

Which software is affected by CVE-2008-2384?

CVE-2008-2384 specifically affects mod_auth_mysql used alongside the Apache HTTP Server.

5

How can I identify if I'm vulnerable to CVE-2008-2384?

You can identify vulnerability to CVE-2008-2384 by checking if your installation of mod_auth_mysql uses multibyte character sets permitting the backslash '\'.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203