CVE:CVE-2001-1089
CNNVD:CNNVD-200109-034
nss-pgsql 0.9.0及其早期版本中的libnss-pgsql存在漏洞。远程攻击者可以通过向HTTP请求中注入SQL代码执行任意SQL查询。
solution:Upgrade alessandro_gardich nss_postgresql to a higher version than 0.6.1,and avoid the version 0.6.1; Upgrade joerg_wendland libnss-pgsql to a higher version than 0.9.0,and avoid the version 0.9.0