The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
gnu mailutils 1.0.6.1.1 |
Vulmon