Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Gentoo: GLSA-200409-05 Normal: Gallery Command Execution Issue

gentoo
Calendar Grey September 2, 2004
Scroller Gentoo
The Gentoo Linux Security Advisory GLSA 200409-05 details a serious vulnerability in the Gallery app's image upload feature, allowing file upload exploits. Users should upgrade to the latest stable version and enhance upload directory permissions and server security protocols to combat these risks and fortify defenses against future threats
The Gallery image upload code contains a temporary file handling vulnerability which could lead to execution of arbitrary commands.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200409-05
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Gallery: Arbitrary command execution
      Date: September 02, 2004
      Bugs: #60742
        ID: 200409-05


Synopsis
=======
The Gallery image upload code contains a temporary file handling
vulnerability which could lead to execution of arbitrary commands.

Background
=========
Gallery is a PHP script for maintaining online photo albums.

Affected packages
================
    -------------------------------------------------------------------
     Package           /  Vulnerable  /                     Unaffected
    -------------------------------------------------------------------
  1  www-apps/gallery     < 1.4.4_p2                       >= 1.4.4_p2

==========
The upload handling code in Gallery places uploaded files in a
temporary directory. After 30 seco...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo arbitrary command execution temporary file issue gallery normal severity image upload

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo arbitrary command execution temporary file issue gallery normal severity image upload

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround