PT-2005-4757 · Gallery · Gallery

Published 2005-12-05 · Updated 2018-10-19 · CVE-2005-4021

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gallery versions prior to 2.0.2

Description The issue allows remote attackers to obtain sensitive information due to the installer storing the install log under the web document root with insufficient access control.

Recommendations For Gallery versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-4021

Affected Products

Gallery

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-4021 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4021 · Note
• http://vupen.com/english/advisories/2005/2681 · Note
• http://securityfocus.com/bid/15614 · Note
• http://securityfocus.com/archive/1/418200/100/0/threaded · Note