CVE-2006-4731

2006-09-1300:07:00

Debian Security Bug Tracker

security-tracker.debian.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.4%

JSON

Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing …/ (dot dot slash).

OSVersionArchitecturePackageVersionFilename
Debian12allsql-ledger< 2.6.19-1sql-ledger_2.6.19-1_all.deb
Debian11allsql-ledger< 2.6.19-1sql-ledger_2.6.19-1_all.deb
Debian10allsql-ledger< 2.6.19-1sql-ledger_2.6.19-1_all.deb
Debian999allsql-ledger< 2.6.19-1sql-ledger_2.6.19-1_all.deb
Debian13allsql-ledger< 2.6.19-1sql-ledger_2.6.19-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	sql-ledger	< 2.6.19-1	sql-ledger_2.6.19-1_all.deb
Debian	11	all	sql-ledger	< 2.6.19-1	sql-ledger_2.6.19-1_all.deb
Debian	10	all	sql-ledger	< 2.6.19-1	sql-ledger_2.6.19-1_all.deb
Debian	999	all	sql-ledger	< 2.6.19-1	sql-ledger_2.6.19-1_all.deb
Debian	13	all	sql-ledger	< 2.6.19-1	sql-ledger_2.6.19-1_all.deb