The CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large Content-Length.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2008-09-15 08:14
Updated : 2018-10-11 13:50
NVD link : CVE-2008-4077
Mitre link : CVE-2008-4077
JSON object : View
CWE
CWE-399
Resource Management Errors
Products Affected
dws_systems_inc.
- sql-ledger
sql-ledger
- sql-ledger
ledgersmb
- ledgersmb