| Package | Affected versions | Patched versions |
|---|---|---|
| pam mysql | = 0.1= 0.2= 0.3= 0.4 |
The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free