CVE-2005-3656

CVE-2005-3656 describes multiple format string vulnerabilities in mod_auth_pgsql before version 2.0.3, a module used for PostgreSQL user authentication. This flaw allows remote, unauthenticated attackers to execute arbitrary code, specifically demonstrated through manipulating the username field. With a CVSS score of 10.0, this vulnerability is critical due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While the EPSS score indicates a moderate likelihood of exploitation, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.