6.4

CVE-2007-4650

Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV and (b) Reupload modules.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bharat Mediratta ≫ Gallery Version <= 2.2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.7% 0.741
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.gentoo.org/show_bug.cgi?id=191587
http://gallery.menalto.com/gallery_2.2.3_released
Patch
http://osvdb.org/41657
http://osvdb.org/41658
http://secunia.com/advisories/26716
http://secunia.com/advisories/26719
http://secunia.com/advisories/27502
http://secunia.com/advisories/27594
http://security.gentoo.org/glsa/glsa-200711-03.xml
http://www.debian.org/security/2007/dsa-1404
http://www.securityfocus.com/bid/25580
http://www.vupen.com/english/advisories/2007/3072
https://bugzilla.redhat.com/show_bug.cgi?id=267421
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html