Debian Security Advisory 1688 – Two SQL injection vulnerabilities have beein found in courier-authlib, the courier authentification library. The MySQL database interface used insufficient escaping mechanisms when constructing SQL statements, leading to SQL injection vulnerabilities if certain charsets are used (CVE-2008-2380). A similar issue affects the PostgreSQL database interface (CVE-2008-2667).
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/73326/dsa-1688-1.txt
Source: https://packetstormsecurity.com/files/73326/Debian-Linux-Security-Advisory-1688-1.html