CVE-2007-1437

2007-03-1319:19:00

[email protected]

web.nvd.nist.gov

cve-2007-1437

ledgersmb

sql-ledger

vulnerability

remote attackers

authentication

code execution

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.7%

JSON

Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution.

Affected configurations

NVD

Node

ledgersmbledgersmbMatch1.0.0

ledgersmbledgersmbMatch1.1.0

ledgersmbledgersmbMatch1.1.1

sql-ledgersql-ledgerRange≤2.6.24

CPENameOperatorVersion
ledgersmb:ledgersmbledgersmbeq1.0.0
ledgersmb:ledgersmbledgersmbeq1.1.0
ledgersmb:ledgersmbledgersmbeq1.1.1
sql-ledger:sql-ledgersql-ledgerle2.6.24