{"id":"DEBIAN-CVE-2006-4244","details":"SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value.","modified":"2026-09-12T06:47:32.768511047Z","published":"2006-08-31T01:04:00Z","upstream":["CVE-2006-4244"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2006-4244"}],"affected":[{"package":{"name":"sql-ledger","ecosystem":"Debian:12","purl":"pkg:deb/debian/sql-ledger?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.18-1"}]}],"ecosystem_specific":{"urgency":"medium"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-4244.json"}},{"package":{"name":"sql-ledger","ecosystem":"Debian:13","purl":"pkg:deb/debian/sql-ledger?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.18-1"}]}],"ecosystem_specific":{"urgency":"medium"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-4244.json"}},{"package":{"name":"sql-ledger","ecosystem":"Debian:14","purl":"pkg:deb/debian/sql-ledger?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.18-1"}]}],"ecosystem_specific":{"urgency":"medium"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-4244.json"}}],"schema_version":"1.9.0"}