CVE-2007-1329 Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . (dot) characters adjacent....
HighCVSS 10.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote attackers to read and overwrite arbitrary files, and execute arbitrary code, via . (dot) characters adjacent to (1) users and (2) users/members strings, which are removed by blacklisting functions that filter these strings and collapse into .. (dot dot) sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ledgersmb | <= 1.1.1 | No fix listed |
| sql-ledger | = 2.6.25 | No fix listed |
| debian/sql-ledger(Debian:12) | All versions | No fix listed |
| debian/sql-ledger(Debian:12) | = 3.2.6-1 | No fix listed |
| debian/sql-ledger(Debian:13) | All versions | No fix listed |
| debian/sql-ledger(Debian:13) | = 3.2.6-1 | No fix listed |
| debian/sql-ledger(Debian:14) | All versions | No fix listed |
| debian/sql-ledger(Debian:14) | = 3.2.6-1 | No fix listed |
References
- 33619 vdb-entry
- 33621 vdb-entry
- 24363 third-party-advisory
- 24366 third-party-advisory
- 2381 third-party-advisory
- 1017715 vdb-entry
- 20070301 Full disclosure: Directory Transversal and Arbitrary Code Execution Vulnerability in SQL-Ledger and LedgerSMB mailing-list
- sqlledger-userpathmemberfile-dir-traversal(32776) vdb-entry
- Debian Security Tracker CVE-2007-1329 vendor-advisory
- bugs.debian.org issue-tracking