CVE-2007-0667 The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary code via redirects, related to callbacks, a different issue th...
MediumCVSS 6.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to execute arbitrary code via redirects, related to callbacks, a different issue than CVE-2006-5872.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ledgersmb | <= 1.1.1 | No fix listed |
| sql-ledger | = 2.4.7 | No fix listed |
| sql-ledger | = 2.6.17 | No fix listed |
| sql-ledger | = 2.6.18 | No fix listed |
| sql-ledger | = 2.6.19 | No fix listed |
| sql-ledger | = 2.6.21 | No fix listed |
| sql-ledger | = 2.6.25 | No fix listed |
| debian/sql-ledger(Debian:12) | All versions | No fix listed |
| debian/sql-ledger(Debian:12) | = 3.2.6-1 | No fix listed |
| debian/sql-ledger(Debian:13) | All versions | No fix listed |
| debian/sql-ledger(Debian:13) | = 3.2.6-1 | No fix listed |
| debian/sql-ledger(Debian:14) | All versions | No fix listed |
| debian/sql-ledger(Debian:14) | = 3.2.6-1 | No fix listed |
References
- 2217 third-party-advisory
- 20070127 Arbitrary Code Execution in SQL-Ledger and LedgerSMB through redirects mailing-list
- 20070206 Unofficial SQL-Ledger patch for CVE-2007-0667 mailing-list
- 22295 vdb-entry
- ADV-2007-0407 vdb-entry vendor-advisory
- Debian Security Tracker CVE-2007-0667 vendor-advisory
- bugs.debian.org issue-tracking