CVE-2007-1436

Unspecified vulnerability in admin.pl in SQL-Ledger before 2.6.26 and LedgerSMB before 1.1.9 allows remote attackers to bypass authentication via unknown vectors that prevents a password check from occurring.

Link	Resource
http://www.securityfocus.com/bid/22889	Patch
http://secunia.com/advisories/24467	Vendor Advisory
http://secunia.com/advisories/24496	Patch Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=494462&group_id=175965
http://www.osvdb.org/33622
http://www.osvdb.org/33623
http://securityreason.com/securityalert/2436
http://www.securityfocus.com/archive/1/462375/100/0/threaded

Configuration 1

cpe:2.3:a:sql-ledger:sql-ledger:2.6.16:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.5:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.6:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.11:*:*:*:*:*:*:* cpe:2.3:a:ledgersmb:ledgersmb:1.1.0:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.7:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.1:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.15:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.8:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.9:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.0:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.12:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.3:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.9:*:*:*:*:*:*:* cpe:2.3:a:ledgersmb:ledgersmb:1.1.5:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.19:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.17:*:*:*:*:*:*:* cpe:2.3:a:ledgersmb:ledgersmb:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.4:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.14:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.6:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.10:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.13:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.4:*:*:*:*:*:*:* cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.16:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.7:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.18:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.14:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.15:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.12:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.2:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.4.11:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.10:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.21:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.8:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:*:*:*:*:*:*:*:* cpe:2.3:a:ledgersmb:ledgersmb:1.1.1:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.5:*:*:*:*:*:*:* cpe:2.3:a:sql-ledger:sql-ledger:2.6.13:*:*:*:*:*:*:*

---

Published : 2007-03-13 07:19

Updated : 2018-10-16 04:38

---

NVD link : CVE-2007-1436

Mitre link : CVE-2007-1436

No products.

NVD-CWE-Other