Gentoo: 200704-22 High: PEAR-DBX Code Execution Vulnerability

Gentoo Linux Security Advisory GLSA 200603-13 https://security.gentoo.org/ Severity: Normal Title: PEAR-Auth: Potential authentication bypass Date: March 17, 2006 Bugs: #123832 ID: 200603-13

Synopsis ======= PEAR-Auth did not correctly verify data passed to the DB and LDAP containers, thus allowing to inject false credentials to bypass the authentication.
Background ========= PEAR-Auth is a PEAR package that provides methods to create a PHP based authentication system.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-php/PEAR-Auth < 1.2.4 >= 1.2.4
========== Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and ...