Lucene search
HistoryOct 20, 2007 - 10:00 a.m.
CVE-2003-1428
cve-2003-1428
gallery 1.3.3
insecure permissions
local users
photo compromise
4.8 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.
Affected configurations
Node
linuxlinux_kernel
bharat_medirattagalleryMatch1.3.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| bharat_mediratta:gallery | bharat mediratta gallery | eq | 1.3.3 |
4.8 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2003-1428