5

CVE-2006-4731

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dws Systems Inc. ≫ Sql-ledger Version2.2.0
Dws Systems Inc. ≫ Sql-ledger Version2.2.1
Dws Systems Inc. ≫ Sql-ledger Version2.2.2
Dws Systems Inc. ≫ Sql-ledger Version2.2.3
Dws Systems Inc. ≫ Sql-ledger Version2.2.4
Dws Systems Inc. ≫ Sql-ledger Version2.2.5
Dws Systems Inc. ≫ Sql-ledger Version2.2.6
Dws Systems Inc. ≫ Sql-ledger Version2.2.7
Dws Systems Inc. ≫ Sql-ledger Version2.4.0
Dws Systems Inc. ≫ Sql-ledger Version2.4.1
Dws Systems Inc. ≫ Sql-ledger Version2.4.2
Dws Systems Inc. ≫ Sql-ledger Version2.4.3
Dws Systems Inc. ≫ Sql-ledger Version2.4.4
Dws Systems Inc. ≫ Sql-ledger Version2.4.5
Dws Systems Inc. ≫ Sql-ledger Version2.4.6
Dws Systems Inc. ≫ Sql-ledger Version2.4.7
Dws Systems Inc. ≫ Sql-ledger Version2.4.8
Dws Systems Inc. ≫ Sql-ledger Version2.4.9
Dws Systems Inc. ≫ Sql-ledger Version2.4.10
Dws Systems Inc. ≫ Sql-ledger Version2.4.11
Dws Systems Inc. ≫ Sql-ledger Version2.4.12
Dws Systems Inc. ≫ Sql-ledger Version2.4.13
Dws Systems Inc. ≫ Sql-ledger Version2.4.14
Dws Systems Inc. ≫ Sql-ledger Version2.4.15
Dws Systems Inc. ≫ Sql-ledger Version2.4.16
Dws Systems Inc. ≫ Sql-ledger Version2.6.1
Dws Systems Inc. ≫ Sql-ledger Version2.6.2
Dws Systems Inc. ≫ Sql-ledger Version2.6.3
Dws Systems Inc. ≫ Sql-ledger Version2.6.4
Dws Systems Inc. ≫ Sql-ledger Version2.6.5
Dws Systems Inc. ≫ Sql-ledger Version2.6.6
Dws Systems Inc. ≫ Sql-ledger Version2.6.7
Dws Systems Inc. ≫ Sql-ledger Version2.6.8
Dws Systems Inc. ≫ Sql-ledger Version2.6.9
Dws Systems Inc. ≫ Sql-ledger Version2.6.10
Dws Systems Inc. ≫ Sql-ledger Version2.6.11
Dws Systems Inc. ≫ Sql-ledger Version2.6.12
Dws Systems Inc. ≫ Sql-ledger Version2.6.13
Dws Systems Inc. ≫ Sql-ledger Version2.6.14
Dws Systems Inc. ≫ Sql-ledger Version2.6.15
Dws Systems Inc. ≫ Sql-ledger Version2.6.16
Dws Systems Inc. ≫ Sql-ledger Version2.6.17
Dws Systems Inc. ≫ Sql-ledger Version2.6.18
Ledgersmb ≫ Ledgersmb Version <= 1.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.73% 0.921
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.sql-ledger.org/cgi-bin/nav.pl?page=news.html&title=What%27s%20New
http://secunia.com/advisories/21824
Patch
Vendor Advisory
http://secunia.com/advisories/21886
Patch
Vendor Advisory
http://securityreason.com/securityalert/1553
http://sourceforge.net/project/shownotes.php?group_id=175965&release_id=446778
Patch
http://svn.sourceforge.net/viewvc/ledger-smb/trunk/login.pl?r1=53&r2=69
http://www.securityfocus.com/archive/1/445817/100/0/threaded
http://www.securityfocus.com/bid/19960
http://www.vupen.com/english/advisories/2006/3554
http://www.vupen.com/english/advisories/2006/3555
https://exchange.xforce.ibmcloud.com/vulnerabilities/28885