CVE-2008-4077

The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large Content-Length.
Configurations

Configuration 1

cpe:2.3:a:ledgersmb:ledgersmb:1.2.13:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.16:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.5:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.14:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.6:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.10:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.10:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.11:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.7:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.7:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.15:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.8:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.12:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.5:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.6:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.15:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.9:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.0:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.12:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.16:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.3:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.12:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.9:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.6:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.3:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.12:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.4:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.13:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.13:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.14:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.19:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.17:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.16:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.5:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.11:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.6:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.13:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.5:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.14:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.14:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.6:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.7:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.8:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.11:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:*:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.18:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.16:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.10:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.13:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.8:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.2:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.4:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.9:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.4:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.7:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.25:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:*:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.16:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.23:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.7:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.18:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.20:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.11:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.9:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.22:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.1.8:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.26:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.14:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.15:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.4:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.12:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.27:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.12:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.2:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.15:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.4.11:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:*:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.10:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.27:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.9:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.17:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.21:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.8:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.10:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.2:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.0:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.3:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.5:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.2.7:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.5:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.24:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.15:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.9:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.8:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.10:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.8.6:*:*:*:*:*:*:*
cpe:2.3:a:ledgersmb:ledgersmb:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:sql-ledger:sql-ledger:2.6.13:*:*:*:*:*:*:*
cpe:2.3:a:dws_systems_inc.:sql-ledger:2.6.2:*:*:*:*:*:*:*

Information

Published : 2008-09-15 03:14

Updated : 2018-10-11 08:50


NVD link : CVE-2008-4077

Mitre link : CVE-2008-4077

Products Affected
No products.
CWE