Gallery: Multiple vulnerabilities
1.
Gentoo Linux Security Advisory
Version Information
| Advisory Reference |
GLSA 200811-02 / gallery |
| Release Date |
November 09, 2008 |
| Latest Revision |
May 28, 2009: 02 |
| Impact |
normal |
| Exploitable |
remote |
| Package |
Vulnerable versions |
Unaffected versions |
Architecture(s) |
| www-apps/gallery |
<
2.2.6 |
>=
2.2.6,
revision >=
1.5.9,
revision >=
1.5.10 |
All supported architectures
|
Related bugreports:
#234137, #238113
Synopsis
Multiple vulnerabilities in Gallery may lead to execution of arbitrary
code, disclosure of local files or theft of user's credentials.
2.
Impact Information
Background
Gallery is an open source web based photo album organizer.
Description
Multiple vulnerabilities have been discovered in Gallery 1 and 2:
-
Digital Security Research Group reported a directory traversal
vulnerability in contrib/phpBB2/modules.php in Gallery 1, when
register_globals is enabled (CVE-2008-3600).
-
Hanno Boeck reported that Gallery 1 and 2 did not set the secure flag
for the session cookie in an HTTPS session (CVE-2008-3662).
-
Alex Ustinov reported that Gallery 1 and 2 does not properly handle ZIP
archives containing symbolic links (CVE-2008-4129).
-
The vendor reported a Cross-Site Scripting vulnerability in Gallery 2
(CVE-2008-4130).
Impact
Remote attackers could send specially crafted requests to a server
running Gallery, allowing for the execution of arbitrary code when
register_globals is enabled, or read arbitrary files via directory
traversals otherwise. Attackers could also entice users to visit
crafted links allowing for theft of login credentials.
3.
Resolution Information
Workaround
There is no known workaround at this time.
Resolution
All Gallery 2 users should upgrade to the latest version:
Code Listing 3.1: Resolution |
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/gallery-2.2.6"
|
All Gallery 1 users should upgrade to the latest version:
Code Listing 3.2: Resolution |
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/gallery-1.5.9"
|
4.
References
|
