pam_mysql where option escapes ' and " and than extra where options destroy the sql-query

[Ingo Reinhart]

Binary package hint: libpam-mysql

Hello,

if you try in your sasl-auth config with the pam_mysql.so (from libpam-mysql) the where option this breake the SQL query.

This config line:
auth required pam_mysql.so user=XXXX passwd=XXXX host=127.0.0.1 db=emailserv table=emailuser usercolumn=email passwdcolumn=password crypt=1 [where=active='1' AND postfix='1']

result in this (bad) query:
 SELECT password FROM emailuser WHERE email = 'XXXX' AND (active=\'1\' AND postfix=\'1\')

My system:
lsb_release -rd
Description: Ubuntu 8.04
Release: 8.04

[Jamie Strandboge (jdstrand)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.