PT-2007-2930 · Sql Ledger · Sql-Ledger

Published 2007-03-20 · Updated 2018-10-16 · CVE-2007-1541

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SQL-Ledger version 2.6.27

Description The issue allows remote attackers to bypass authentication and run arbitrary executables due to a directory traversal vulnerability. This is achieved by using a .. (dot dot) sequence in the login parameter, exploiting the insufficient protection against directory traversal attacks, which only checks for the presence of a NULL (%00) character.

Recommendations For SQL-Ledger version 2.6.27, consider restricting access to the am.pl script until a patch is available, and avoid using the login parameter with untrusted input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1541

Affected Products

Sql-Ledger

References · 9

• https://security-tracker.debian.org/tracker/CVE-2007-1541 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1541 · Security Note
• https://osv.dev/vulnerability/CVE-2007-1541 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-1541 · Vendor Advisory
• http://vupen.com/english/advisories/2007/1025 · Note
• http://securityfocus.com/archive/1/463175/100/0/threaded · Note
• http://sql-ledger.com/cgi-bin/nav.pl?page=news.html&title=What%27s%20New · Note
• http://secunia.com/advisories/24560 · Note
• http://securityfocus.com/bid/23034 · Note