PT-2006-1648 · Gallery · Gallery

Published 2006-02-08 · Updated 2024-02-14 · CVE-2006-0587

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gallery versions prior to 1.5.2-pl2

Description The issue allows remote authenticated users to trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file.

Recommendations For versions prior to 1.5.2-pl2, update to version 1.5.2-pl2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-0587

Affected Products

Gallery

References · 13

• http://securitytracker.com/id?1015641 · Patch
• http://secunia.com/advisories/18735 · Vendor Advisory
• http://osvdb.org/22944 · Patch
• http://securityfocus.com/bid/16533 · Patch
• http://gallery.menalto.com/gallery_1_5_2_pl2_security_release · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0587 · Security Note
• http://digitalarmaments.com/2006140293402395.html · Note
• http://osvdb.org/23256 · Note
• http://archives.neohapsis.com/archives/bugtraq/2006-02/0286.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24768 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0587 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24538 · Note
• http://archives.neohapsis.com/archives/bugtraq/2006-02/0224.html · Note