Gallery 会话处理类 目录遍历漏洞
| CNNVD-ID编号 | CNNVD-200603-145 | CVE编号 | CVE-2006-1128 |
| 发布时间 | 2006-03-09 | 更新时间 | 2006-03-10 |
| 漏洞类型 | 路径遍历 | 漏洞来源 | James Bercegay is credited with the discovery of this vulnerability. |
| 危险等级 | 中危 | 威胁类型 | 远程 |
| 厂商 | gallery_project | ||
漏洞介绍
Gallery 2至2.0.2的会话处理类中存在目录遍历漏洞(GallerySession.class) ，远程攻击者可以通过在Cookie中指定会话，访问和删除文件，在会话值被清除前用于构建文件路径。
漏洞补丁
目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：
Gallery 2.0
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Beta3
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Beta2
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Beta1
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha3
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha1
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha4
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha2
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0.1
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0.2
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
参考网址
来源: VUPEN
名称: ADV-2006-0813
链接：http://www.frsirt.com/english/advisories/2006/0813
来源: SECTRACK
名称: 1015717
链接：http://securitytracker.com/id?1015717
来源: SECUNIA
名称: 19104
链接：http://secunia.com/advisories/19104
来源: OSVDB
名称: 23597
来源: MISC
链接：http://www.gulftech.org/?node=research&article_id=00106-03022006
来源: BUGTRAQ
名称: 20060303 Gallery 2 Multiple Vulnerabilities
链接：http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html
来源: XF
名称: gallery-sessionid-bypass-security(25118)
链接：http://xforce.iss.net/xforce/xfdb/25118
来源: BID
名称: 16948
链接：http://www.securityfocus.com/bid/16948
受影响实体
Gallery_project Gallery:2.0_alpha2 Gallery_project Gallery:2.0_alpha1 Gallery_project Gallery:2.0_alpha Gallery_project Gallery:2.0.2 Gallery_project Gallery:2.0.1信息来源
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200603-145
评论