Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2005-3656

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

mod_auth_pgsql apache模块允许对PostgreSQL数据库中存储的数据执行用户认证。 mod_auth_pgsql apache模块在处理日志记录时存在漏洞，远程攻击者可能利用此漏洞在主机上执行任意指令。由于一个设计错误，mod_auth_pgsql模块中的多个日志函数将用户提供的值用作了格式指示符的输入，例如： ap_log_rerror(APLOG_MARK， APLOG_ERR， 0， r， pg_errstr); 如果这部分错误消息中包含有格式串指示符，就会对其进行处理。例如

AI Predicted 10.0 Difficulty: Trivial EPSS 8.90% · P95 Updated Feb 27, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-3656

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

多家厂商mod_auth_pgsql格式串处理漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2005-3656

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2005-3656

请登录查看更多情报信息。

Vendor Advisories for CVE-2005-3656 (14)

http://www.securityfocus.com/bid/16153 vdb-entry x_refsource_BID
http://secunia.com/advisories/18397 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/18347 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/18321 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/18304 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/18348 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/18517 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/18463 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/18350 third-party-advisory x_refsource_SECUNIA
http://securitytracker.com/id?1015446 vdb-entry x_refsource_SECTRACK
https://usn.ubuntu.com/239-1/ vendor-advisory x_refsource_UBUNTU
http://www.vupen.com/english/advisories/2006/0070 vdb-entry x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDKSA-2006:009 vendor-advisory x_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10600 vdb-entry signature x_refsource_OVAL

Other References for CVE-2005-3656 (9)

http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00015.html x_refsource_CONFIRM
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00016.html x_refsource_CONFIRM
http://www.giuseppetanzilli.it/mod_auth_pgsql2/ x_refsource_CONFIRM
http://www.debian.de/security/2006/dsa-935 vendor-advisory x_refsource_DEBIAN
http://www.trustix.org/errata/2006/0002/ vendor-advisory x_refsource_TRUSTIX
ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U vendor-advisory x_refsource_SGI
http://www.gentoo.org/security/en/glsa/glsa-200601-05.xml vendor-advisory x_refsource_GENTOO
http://www.redhat.com/support/errata/RHSA-2006-0164.html vendor-advisory x_refsource_REDHAT
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=367 third-party-advisory x_refsource_IDEFENSE

https://www.cve.org/CVERecord?id=CVE-2005-3656

Same Patch Batch · n/a · 2006-01-06 · 29 CVEs total

CVE-2005-4625		某些显示适配器的驱动拒绝服务攻击漏洞
CVE-2005-3654		Blue Coat Systems WinProxy Telnet远程拒绝服务攻击漏洞
CVE-2006-0104		TinyPHPForum多个目录遍历漏洞
CVE-2006-0103		TinyPHPForum 信息泄露漏洞
CVE-2006-0102		TinyPHPForum 跨站脚本攻击漏洞
CVE-2006-0101		sBLOG 0.7.1 多个跨站脚本攻击漏洞
CVE-2006-0100		NicoFTP 缓冲区溢出漏洞
CVE-2006-0099		Valdersoft Shopping Cart远程文件包含漏洞
CVE-2006-0098		OpenBSD DEV/FD任意文件访问漏洞
CVE-2006-0097		PHP MySQL_Connect远程溢出漏洞
CVE-2006-0096		Linux Kernel SDLA IOCTL未经授权的本地固件访问漏洞
CVE-2006-0095		Linux Kernel DM-Crypt本地信息泄露漏洞
CVE-2005-4627		GMailSite跨站脚本攻击漏洞
CVE-2005-4626		Recruitment Software 访问控制漏洞
CVE-2005-3357		Apache Mod_SSL可定制错误文档拒绝服务漏洞
CVE-2005-4624		PTnet IRCD远程拒绝服务漏洞
CVE-2005-4623		EFileGo多个输入验证漏洞
CVE-2005-4622		EFileGo目录遍历漏洞
CVE-2005-4621		VBulletin Profile.PHP跨站脚本攻击漏洞
CVE-2005-4620		RARLAB WinRAR命令行处理溢出漏洞

Showing top 20 of 29 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2005-3656

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2005-3656

Quick assessment

I. Basic Information for CVE-2005-3656

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2005-3656

III. Intelligence Information for CVE-2005-3656

Vendor Advisories for CVE-2005-3656 (14)

Other References for CVE-2005-3656 (9)

Same Patch Batch · n/a · 2006-01-06 · 29 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2005-3656

Leave a comment