Secunia

A vulnerability has been reported in the Courier Authentication Library, which can be exploited by malicious people to conduct SQL injection attacks.

Certain unspecified input passed to the library is not properly sanitised before being used in SQL queries. This can potentially be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Successful exploitation requires that a Postgres database is used and that a Non-Latin character set is selected.

The vulnerability is reported in versions prior to 0.62.0.

Solution
Update to version 0.62.0.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.courier-mta.org/authlib/changelog.html

Deep Links
Links available in Customer Area