PT-2005-4717 · Coppermine · Coppermine Photo Gallery

Published 2005-12-03 · Updated 2019-07-16 · CVE-2005-3979

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions 1.4.2 and 1.4 beta

Description The issue concerns the relocate server.php file, which remains present after installation and lacks authentication. This allows remote attackers to access sensitive information, including database configuration, by making a direct request to the file.

Recommendations For Coppermine Photo Gallery version 1.4.2, remove or restrict access to the relocate server.php file to prevent unauthorized access. For Coppermine Photo Gallery version 1.4 beta, remove or restrict access to the relocate server.php file to prevent unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2005-3979

Affected Products

Coppermine Photo Gallery

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-3979 · Security Note
• http://coppermine-gallery.net/forum/index.php?topic=24217.0 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3979 · Note
• http://secunia.com/advisories/17855 · Note
• http://vupen.com/english/advisories/2005/2698 · Note