PT-2003-2401 · Album.Pl · Album.Pl

Aresu · Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1456

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Album.pl version 6.1

Description The issue allows remote attackers to execute arbitrary commands when an alternative configuration file is used. The exact attack vectors are not specified.

Recommendations For Album.pl version 6.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2003-1456

Affected Products

Album.Pl

References · 7

• 🔥 https://exploit-db.com/exploits/22545 · Exploit
• http://securityfocus.com/archive/1/319763 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2003-1456 · Security Note
• http://securityreason.com/securityalert/3270 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11878 · Note
• http://perl.bobbitt.ca/yabbse/index.php?board=2%3Baction=display%3Bthreadid=720 · Note
• http://securityfocus.com/bid/7444 · Note