Lucene search
HistorySep 15, 2008 - 3:14 p.m.
CVE-2008-4077
cve-2008-4077
cgi scripts
ledgersmb
sql-ledger
denial of service
nvd
6.9 Medium
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.015 Low
EPSS
Percentile
87.0%
The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large Content-Length.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sql-ledger:sql-ledger | sql-ledger | le | 2.8.17 |
| ledgersmb:ledgersmb | ledgersmb | lt | 1.2.15 |
Related
ubuntucve
ubuntucve
CVE-2008-4077
2008-09-15 00:00:00
prion
prion
Code injection
2008-09-15 15:14:00
debiancve
debiancve
CVE-2008-4077
2008-09-15 15:14:00
cvelist
cvelist
CVE-2008-4077
2008-09-15 15:00:00
6.9 Medium
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.015 Low
EPSS
Percentile
87.0%
Related for CVE-2008-4077