PT-2006-4874 · Gallery · Gallery

Moritz Muehlenhoff · Published 2006-08-16 · Updated 2011-03-08 · CVE-2006-4030

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gallery versions 1.5.1-RC2 and earlier

Description The issue allows remote attackers to obtain sensitive information via unspecified attack vectors, related to two file exposure bugs in the stats module.

Recommendations For Gallery versions 1.5.1-RC2 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2006-4030

DSA-1148-1

Affected Products

Gallery

References · 8

• http://secunia.com/advisories/21502 · Vendor Advisory
• http://secunia.com/advisories/16594 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4030 · Security Note
• http://debian.org/security/2006/dsa-1148 · Vendor Advisory
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285 · Note
• http://vupen.com/english/advisories/2006/3250 · Note
• http://securityfocus.com/bid/19453 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4030 · Note