CVE-2021-3850
published 2022-01-25CVE-2021-3850: Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.
PriorityP352critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
EPSS
2.17%
80.4th percentile
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adodb | adodb-php | >= 0 < 5.20.21 | 5.20.21 |
| adodb | adodb-php | >= 5.21.0 < 5.21.4 | 5.21.4 |
| adodb | adodb_adodb | >= unspecified < 5.20.21 | 5.20.21 |
| adodb_project | adodb | <= 5.20.21 | — |
| debian | debian_linux | — | — |
| debian | libphp-adodb | < libphp-adodb 5.21.4-1 (bookworm) | libphp-adodb 5.21.4-1 (bookworm) |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
osv9.1CRITICAL
vendor_debian9.1CRITICAL
vendor_cisco6.7MEDIUM
vendor_ubuntu6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
libphp-adodb vulnerabilities
osv·2024-06-10·CVSS 6.1
CVE-2016-7405 [MEDIUM] libphp-adodb vulnerabilities
libphp-adodb vulnerabilities
It was discovered that the PDO driver in ADOdb was incorrectly handling
string quotes. A remote attacker could possibly use this issue to
perform SQL injection attacks. This issue only affected Ubuntu 16.04 LTS.
(CVE-2016-7405)
It was discovered that ADOdb was incorrectly handling GET parameters in
test.php. A remote attacker could possibly use this issue to execute
cross-site scripting (XSS) attacks. This issue only affected Ubuntu
16.04 LTS. (CVE-2016-4855)
Emmet Leahy discovered that ADOdb was incorrectly handling string quotes
in PostgreSQL connections. A remote attacker could possibly use this issue
to bypass authentication. (CVE-2021-3850)
OSV
Authentication Bypass in ADOdb/ADOdb
osv·2022-01-27
CVE-2021-3850 [CRITICAL] Authentication Bypass in ADOdb/ADOdb
Authentication Bypass in ADOdb/ADOdb
### Impact
An attacker can inject values into a PostgreSQL connection string by providing a parameter surrounded by single quotes.
Depending on how the library is used in the client software, this may allow an attacker to bypass the login process, gain access to the server's IP address, etc.
### Patches
The vulnerability is fixed in ADOdb versions 5.20.21 (952de6c4273d9b1e91c2b838044f8c2111150c29) and 5.21.4 or later (b4d5ce70034c5aac3a1d51d317d93c037a0938d2).
The simplest patch is to delete line 29 in `drivers/adodb-postgres64.inc.php`:
```php
diff --git a/drivers/adodb-postgres64.inc.php b/drivers/adodb-postgres64.inc.php
index d04b7f67..729d7141 100644
--- a/drivers/adodb-postgres64.inc.php
+++ b/drivers/adodb-postgres64.inc.php
@@ -26,7 +26,6
GHSA
Authentication Bypass in ADOdb/ADOdb
ghsa·2022-01-27
CVE-2021-3850 [CRITICAL] CWE-287 Authentication Bypass in ADOdb/ADOdb
Authentication Bypass in ADOdb/ADOdb
### Impact
An attacker can inject values into a PostgreSQL connection string by providing a parameter surrounded by single quotes.
Depending on how the library is used in the client software, this may allow an attacker to bypass the login process, gain access to the server's IP address, etc.
### Patches
The vulnerability is fixed in ADOdb versions 5.20.21 (952de6c4273d9b1e91c2b838044f8c2111150c29) and 5.21.4 or later (b4d5ce70034c5aac3a1d51d317d93c037a0938d2).
The simplest patch is to delete line 29 in `drivers/adodb-postgres64.inc.php`:
```php
diff --git a/drivers/adodb-postgres64.inc.php b/drivers/adodb-postgres64.inc.php
index d04b7f67..729d7141 100644
--- a/drivers/adodb-postgres64.inc.php
+++ b/drivers/adodb-postgres64.inc.php
@@ -26,7 +26,6
OSV
CVE-2021-3850: Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5
osv·2022-01-25·CVSS 9.1
CVE-2021-3850 [CRITICAL] CVE-2021-3850: Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.
Ubuntu
ADOdb vulnerabilities
vendor_ubuntu·2024-06-10·CVSS 6.1
CVE-2016-4855 [MEDIUM] ADOdb vulnerabilities
Title: ADOdb vulnerabilities
Summary: Several security issues were fixed in ADOdb.
It was discovered that the PDO driver in ADOdb was incorrectly handling
string quotes. A remote attacker could possibly use this issue to
perform SQL injection attacks. This issue only affected Ubuntu 16.04 LTS.
(CVE-2016-7405)
It was discovered that ADOdb was incorrectly handling GET parameters in
test.php. A remote attacker could possibly use this issue to execute
cross-site scripting (XSS) attacks. This issue only affected Ubuntu
16.04 LTS. (CVE-2016-4855)
Emmet Leahy discovered that ADOdb was incorrectly handling string quotes
in PostgreSQL connections. A remote attacker could possibly use this issue
to bypass authentication. (CVE-2021-3850)
Instructions: In general, a standard system update will ma
Cisco
Cisco IOS XE Software Fast Reload Vulnerabilities
vendor_cisco·2021-03-24·CVSS 6.7
CVE-2021-1375 [MEDIUM] CWE-347 Cisco IOS XE Software Fast Reload Vulnerabilities
Cisco IOS XE Software Fast Reload Vulnerabilities
Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3650, Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local attacker to either execute arbitrary code on the underlying operating system, install and boot a malicious software image, or execute unsigned binaries on an affected device.
These vulnerabilities are due to improper checks performed by system boot routines. To exploit these vulnerabilities, the attacker would need privileged access to the CLI of the device. A successful exploit could allow the attacker to either execute arbitrary code on the underlying operating system or execute unsigned code and bypass the image
Debian
CVE-2021-3850: libphp-adodb - Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior...
vendor_debian·2021·CVSS 9.1
CVE-2021-3850 [CRITICAL] CVE-2021-3850: libphp-adodb - Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior...
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.
Scope: local
bookworm: resolved (fixed in 5.21.4-1)
bullseye: resolved (fixed in 5.20.19-1+deb11u1)
forky: resolved (fixed in 5.21.4-1)
sid: resolved (fixed in 5.21.4-1)
trixie: resolved (fixed in 5.21.4-1)
Cisco
Cisco IOS XE Software Fast Reload Vulnerabilities
vendor_cisco·CVSS 3.0
CVE-2021-1375 Cisco IOS XE Software Fast Reload Vulnerabilities
CVE-2021-1375: Cisco IOS XE Software Fast Reload Vulnerabilities
Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3650, Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local attacker to either execute arbitrary code on the underlying operating system, install and boot a malicious software image, or execute unsigned binaries on an affected device. These vulnerabilities are due to improper checks performed by system boot routines. To exploit these vulnerabilities, the attacker would need privileged access to the CLI of the device. A successful exploit could allow the attacker to either execute arbitrary code on the underlying operating system or execute unsigned code and byp
Cisco
Cisco IOS XE Software Fast Reload Vulnerabilities
vendor_cisco·CVSS 3.0
CVE-2021-1376 Cisco IOS XE Software Fast Reload Vulnerabilities
CVE-2021-1376: Cisco IOS XE Software Fast Reload Vulnerabilities
Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3650, Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local attacker to either execute arbitrary code on the underlying operating system, install and boot a malicious software image, or execute unsigned binaries on an affected device. These vulnerabilities are due to improper checks performed by system boot routines. To exploit these vulnerabilities, the attacker would need privileged access to the CLI of the device. A successful exploit could allow the attacker to either execute arbitrary code on the underlying operating system or execute unsigned code and byp
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/adodb/adodb/commit/952de6c4273d9b1e91c2b838044f8c2111150c29https://huntr.dev/bounties/bdf5f216-4499-4225-a737-b28bc6f5801chttps://lists.debian.org/debian-lts-announce/2022/02/msg00006.htmlhttps://www.debian.org/security/2022/dsa-5101https://github.com/adodb/adodb/commit/952de6c4273d9b1e91c2b838044f8c2111150c29https://huntr.dev/bounties/bdf5f216-4499-4225-a737-b28bc6f5801chttps://lists.debian.org/debian-lts-announce/2022/02/msg00006.htmlhttps://www.debian.org/security/2022/dsa-5101
2022-01-25
Published