WEBGENEius GOOP Gallery Directory Traversal Vulnerability

Bugtraq ID:	20331
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 04 2006 12:00AM
Updated:	Oct 18 2006 05:29PM
Credit:	Armorize Technologies credited with the discovery of this vulnerability.
Vulnerable:	webGENEius GOOP Gallery 2.0.2 webGENEius GOOP Gallery 2.0
Not Vulnerable:	webGENEius GOOP Gallery 2.0.3

WEBGENEius GOOP Gallery Directory Traversal Vulnerability

GOOP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

GOOP Gallery 2.0.2 is reported vulnerable; other versions may be affected as well.

WEBGENEius GOOP Gallery Directory Traversal Vulnerability

Attackers can exploit this issue via a web client.

WEBGENEius GOOP Gallery Directory Traversal Vulnerability

Solution:
The vendor has released version 2.0.3 to address this issue.


webGENEius GOOP Gallery 2.0

• webGENEius gg2.0.3.zip
  http://prdownloads.sourceforge.net/goopgallery/gg2.0.3.zip?download

webGENEius GOOP Gallery 2.0.2

• webGENEius gg2.0.3.zip
  http://prdownloads.sourceforge.net/goopgallery/gg2.0.3.zip?download

WEBGENEius GOOP Gallery Directory Traversal Vulnerability

References:

• GOOP Gallery (webGENEius)
  
• Directory Traversal Vulnerability in Goop Gallery 2.0.2 ([email protected])