CVE:CVE-2011-2688
CNNVD:CNNVD-201107-234
mod-authnz-external模块3.2.5版本的mysql/mysql-auth.pl中存在SQL注入漏洞。向用户名传递的输入在被用于mysql-auth.pl中的SQL查询之前没有经过正确过滤，远程攻击者可借助用户域执行任意SQL命令。
solution:Upgrade mod_authnz_external_project mod_authnz_external to a higher version than 3.2.5,and avoid the version (,3.2.5]; Upgrade debian debian_linux to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0