CVE-2006-0410 - Vulnerability Details - OpenCVE

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
John Lim	Adodb

Configuration 1 [-]

OR	cpe:2.3:a:john_lim:adodb:4.66:::::::*
	cpe:2.3:a:john_lim:adodb:4.68:::::::*
	cpe:2.3:a:john_lim:adodb:4.70:::::::*

No data.

References

Link	Providers
http://secunia.com/advisories/18575
http://secunia.com/advisories/18732
http://secunia.com/advisories/18745
http://secunia.com/advisories/19555
http://secunia.com/advisories/19590
http://secunia.com/advisories/19591
http://secunia.com/advisories/19691
http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718
http://www.debian.org/security/2006/dsa-1029
http://www.debian.org/security/2006/dsa-1030
http://www.debian.org/security/2006/dsa-1031
http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml
http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml
http://www.osvdb.org/22705
http://www.securityfocus.com/bid/16364
http://www.vupen.com/english/advisories/2006/0315
http://www.vupen.com/english/advisories/2006/0448
https://exchange.xforce.ibmcloud.com/vulnerabilities/24314

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-01-25T02:00:00

Updated: 2024-08-07T16:34:14.754Z

Reserved: 2006-01-25T00:00:00

Link: CVE-2006-0410

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-01-25T02:03:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-0410

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-01-24T00:00:00", "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "19590", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19590"}, {"name": "19555", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19555"}, {"name": "DSA-1029", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2006/dsa-1029"}, {"name": "ADV-2006-0448", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/0448"}, {"name": "DSA-1030", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2006/dsa-1030"}, {"name": "ADV-2006-0315", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/0315"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718"}, {"name": "18575", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18575"}, {"name": "19591", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19591"}, {"name": "18745", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18745"}, {"name": "adodb-postgresql-sql-injection(24314)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"}, {"name": "19691", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19691"}, {"name": "DSA-1031", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2006/dsa-1031"}, {"name": "22705", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/22705"}, {"name": "GLSA-200604-07", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"}, {"name": "16364", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/16364"}, {"name": "18732", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18732"}, {"name": "GLSA-200602-02", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-0410", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "19590", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19590"}, {"name": "19555", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19555"}, {"name": "DSA-1029", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2006/dsa-1029"}, {"name": "ADV-2006-0448", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/0448"}, {"name": "DSA-1030", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2006/dsa-1030"}, {"name": "ADV-2006-0315", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/0315"}, {"name": "http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718", "refsource": "CONFIRM", "url": "http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718"}, {"name": "18575", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18575"}, {"name": "19591", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19591"}, {"name": "18745", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18745"}, {"name": "adodb-postgresql-sql-injection(24314)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"}, {"name": "19691", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19691"}, {"name": "DSA-1031", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2006/dsa-1031"}, {"name": "22705", "refsource": "OSVDB", "url": "http://www.osvdb.org/22705"}, {"name": "GLSA-200604-07", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"}, {"name": "16364", "refsource": "BID", "url": "http://www.securityfocus.com/bid/16364"}, {"name": "18732", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18732"}, {"name": "GLSA-200602-02", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T16:34:14.754Z"}, "title": "CVE Program Container", "references": [{"name": "19590", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19590"}, {"name": "19555", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19555"}, {"name": "DSA-1029", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2006/dsa-1029"}, {"name": "ADV-2006-0448", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/0448"}, {"name": "DSA-1030", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2006/dsa-1030"}, {"name": "ADV-2006-0315", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/0315"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718"}, {"name": "18575", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18575"}, {"name": "19591", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19591"}, {"name": "18745", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18745"}, {"name": "adodb-postgresql-sql-injection(24314)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"}, {"name": "19691", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19691"}, {"name": "DSA-1031", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2006/dsa-1031"}, {"name": "22705", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/22705"}, {"name": "GLSA-200604-07", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"}, {"name": "16364", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/16364"}, {"name": "18732", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18732"}, {"name": "GLSA-200602-02", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-0410", "datePublished": "2006-01-25T02:00:00", "dateReserved": "2006-01-25T00:00:00", "dateUpdated": "2024-08-07T16:34:14.754Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:john_lim:adodb:4.66:*:*:*:*:*:*:*", "matchCriteriaId": "9F76566C-7F49-4725-91E6-8E2416CB7F03", "vulnerable": true}, {"criteria": "cpe:2.3:a:john_lim:adodb:4.68:*:*:*:*:*:*:*", "matchCriteriaId": "02F0F5B5-86D2-48C4-872E-3F8C38AF563C", "vulnerable": true}, {"criteria": "cpe:2.3:a:john_lim:adodb:4.70:*:*:*:*:*:*:*", "matchCriteriaId": "7F1503DB-7F84-4F33-8357-7D877529F15C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n de SQL en ADOdb anteriores a 4.71, cuando se usa PostgreSQL, permite a atacantes ejecutar \u00f3rdenes SQL de su elecci\u00f3n mediante vectores de ataque no especificados implicando cadenas binarias."}], "id": "CVE-2006-0410", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-01-25T02:03:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/18575"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/18732"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/18745"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/19555"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/19590"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/19591"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/19691"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2006/dsa-1029"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2006/dsa-1030"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2006/dsa-1031"}, {"source": "cve@mitre.org", "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"}, {"source": "cve@mitre.org", "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/22705"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/16364"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/0315"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/0448"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/18575"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/18732"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/18745"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/19555"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/19590"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/19591"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/19691"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2006/dsa-1029"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2006/dsa-1030"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2006/dsa-1031"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/22705"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/16364"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/0315"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/0448"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24314"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}