[SECURITY] [DSA 879-1] New gallery packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 879-1 [email protected] http://www.debian.org/security/ Martin Schulze November 2nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 879-1] New gallery packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 879-1 [email protected] http://www.debian.org/security/ Martin Schulze November 2nd, 2005 http://www.debian.org/security/faq -...

CVE-2005-2596

CVE-2005-2596 concerns a programming error in the Gallery component used with Postnuke that allows any user with Admin privileges to access all galleries. Open-source advisories and Debian security notes describe a remote-attack surface stemming from a bug in the gallery code that grants full gal...

CVE-2005-2596

User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries...

Gallery PostNuke Integration Access Validation Privilege Escalation

The remote host is running Gallery, a web-based photo album. According to its banner, the version of Gallery installed on the remote host is subject to an access validation issue when integrated with PostNuke, as is the case on the remote host. The issue means that any user with any level of admi...