{
  "schema_version": "1.4.0",
  "id": "GHSA-w6xf-p38w-6xgp",
  "modified": "2022-05-01T06:37:12Z",
  "published": "2022-05-01T06:37:12Z",
  "aliases": [
    "CVE-2006-0056"
  ],
  "details": "Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted passwords, which lead to a double free of a pointer that was created by the pam_get_item function.  NOTE: this issue only occurs in certain configurations in which there are multiple PAM modules, PAM-MySQL is not evaluated first, and there are no requisite modules before PAM-MySQL.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-0056"
    },
    {
      "type": "WEB",
      "url": "http://jvn.jp/cert/JVNVU%23693909/index.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18598"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20690"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1015603"
    },
    {
      "type": "WEB",
      "url": "http://sourceforge.net/forum/forum.php?forum_id=499394"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-18.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/693909"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/22994"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/22995"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/16564"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/0490"
    }
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-02-13T11:06:00Z"
  }
}