Lucene search
Ubuntu.comUB:CVE-2007-1541HistoryMar 20, 2007 - 12:00 a.m.
CVE-2007-1541
2007-03-2000:00:00
ubuntu.com
ubuntu.com
7
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.6%
Directory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks
for the presence of a NULL (%00) character to protect against directory
traversal attacks, which allows remote attackers to run arbitrary
executables and bypass authentication via a … (dot dot) sequence in the
login parameter.
Related
prion
prion
Directory traversal
2007-03-20 22:19:00
cve
cve
CVE-2007-1541
2007-03-20 22:19:00
debiancve
debiancve
CVE-2007-1541
2007-03-20 22:19:00
securityvulns
securityvulns
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.6%
Related for UB:CVE-2007-1541