CVE-2003-0040

CVE-2003-0040 describes a critical SQL injection vulnerability in the PostgreSQL authentication module of Courier 0.40 and earlier, impacting both Courier-IMAP and Courier-MTA. This flaw allows unauthenticated remote attackers to execute arbitrary SQL code by manipulating the username field. With a CVSS score of 7.5, it presents a high risk due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating awareness despite its age.