CVE-2011-2688: SQL Injection
SQL injection vulnerability in mysql/mysql-auth.pl in the modauthnzexternal module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2688?
CVE-2011-2688 is considered a high-severity vulnerability due to its potential for remote exploitation and arbitrary SQL command execution.
How do I fix CVE-2011-2688?
To fix CVE-2011-2688, upgrade the mod_authnz_external module to version 3.2.6 or later.
Which software versions are affected by CVE-2011-2688?
CVE-2011-2688 affects mod_authnz_external versions up to and including 3.2.5 on Debian Linux versions 5.0, 6.0, and 7.0.
Can CVE-2011-2688 be exploited remotely?
Yes, CVE-2011-2688 can be exploited remotely by attackers to execute arbitrary SQL commands.
What type of vulnerability is CVE-2011-2688?
CVE-2011-2688 is an SQL injection vulnerability specifically found in the mod_authnz_external module for Apache HTTP Server.