Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-6689
HistoryJan 17, 2008 - 12:00 a.m.

CVE-2007-6689

2008-01-1700:00:00
ubuntu.com
ubuntu.com
9

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.011

Percentile

84.7%

Menalto Gallery before 2.2.4 does not properly check for malicious file
extensions during file uploads, which allows attackers to execute arbitrary
code via the (1) Core application or (2) MIME module.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.011

Percentile

84.7%