Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Remote execution vulnerability in gallery

Package(s):

gallery

CVE #(s):

Created:

August 14, 2002

Updated:

August 14, 2002

Description:

A remote attacker could execute commands under the uid of the web server by passing in the GALLERY_BASEDIR variable remotely. Gallery is a web-based photo album toolkit.

Alerts:

Debian

DSA-138-1

2002-08-01

(Log in to post comments)