pike: SQL injection vulnerability

pike: SQL injection vulnerability A flaw in the input handling could lead to the execution of arbitrary SQL statements in the underlying PostgreSQL database. pike 2006-08-06 2006-12-13 136065 remote 7.6.86 7.6.86

Pike is a general purpose programming language, able to be used for multiple tasks.

Some input is not properly sanitised before being used in a SQL statement in the underlying PostgreSQL database.

A remote attacker could provide malicious input to a pike program, which might result in the execution of arbitrary SQL statements.

There is no known workaround at this time.

All pike users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=dev-lang/pike-7.6.86"

Secunia Advisory SA20494 CVE-2006-4041 koon koon falco