Gallery Unspecified Security Bypass Vulnerability
BID:32440
Info
Gallery Unspecified Security Bypass Vulnerability
| Bugtraq ID: | 32440 |
| Class: | Access Validation Error |
| CVE: |
CVE-2008-5296 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 21 2008 12:00AM |
| Updated: | Apr 16 2015 05:51PM |
| Credit: | John Hisdock |
| Vulnerable: |
Gallery Gallery 1.5.9 Gallery Gallery 1.5.8 -svn-b34 |
| Not Vulnerable: |
Gallery Gallery 1.5.10 |
Discussion
Gallery Unspecified Security Bypass Vulnerability
Gallery is prone to a security-bypass vulnerability that occurs when handling certain cookies.
An attacker can exploit this issue to bypass certain security restrictions and gain administrative access to the application.
This issue was introduced in Gallery 1.5.8-svn-b34 and remained in the code until Gallery 1.5.10.
Gallery is prone to a security-bypass vulnerability that occurs when handling certain cookies.
An attacker can exploit this issue to bypass certain security restrictions and gain administrative access to the application.
This issue was introduced in Gallery 1.5.8-svn-b34 and remained in the code until Gallery 1.5.10.
Exploit / POC
Gallery Unspecified Security Bypass Vulnerability
An attacker can use a browser to exploit this issue.
An attacker can use a browser to exploit this issue.
Solution / Fix
Gallery Unspecified Security Bypass Vulnerability
Solution:
The vendor has released updates. Please see the references for more information.
Solution:
The vendor has released updates. Please see the references for more information.
References
Gallery Unspecified Security Bypass Vulnerability
References:
References:
- Gallery 1.5.10 and 1.6-RC3 Released - Last G1 Releases from us! (Gallery)
- Gallery Homepage (Gallery)