BugTraq
Arbitrary Code Execution in SQL-Ledger and LedgerSMB through redirects Jan 27 2007 06:43PM
Chris Travers (chris metatrontech com)
Separate from CVE-2006-5872, there is a possibility of causing arbitrary
code execution during redirects. This requires a valid login to exploit
and was discovered and brought to the attention of both the SQL-Ledger
and LedgerSMB team in November. LedgerSMB 1.1.5 corred the problem, but
it is still not corrected in SQL-Ledger.

There is no workaround to prevent the problem except to hope that those
who are using vulnerable software can be trusted.

I will be sending a full disclosure of the problem, as well as an
unofficial patch to SQL-Ledger in a week.

Best Wishes,
Chris Travers
Metatron Technology Consulting
begin:vcard
fn:Chris Travers
n:Travers;Chris
email;internet:chris (at) metatrontech (dot) com [email concealed]
tel;work:509-888-0220
tel;cell:509-630-7794
x-mozilla-html:FALSE
version:2.1
end:vcard

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus