CVE-2003-1227: Code Injection
PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERYBASEDIR parameter, a different vulnerability than CVE-2002-1412. NOTE: this issue might be exploitable only during installation, or if the administrator has not run a security script after installation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable Configuration mode after installation; do not run Gallery 1.4 or 1.4-pl1 in Configuration mode on Unix.
GalleryCMS Configuration mode = disabled - Compensating control
Do not run Gallery 1.4 or 1.4-pl1 on Windows hosts. If Gallery 1.4 or 1.4-pl1 is currently hosted on Windows, restrict access to the installation/configuration interface (index.php) or migrate to a non-Windows host until the product is secured.
- Operational
Run the GalleryCMS security script provided with the distribution immediately after installation (ensure the administrator has executed the security script for Gallery 1.4 or 1.4-pl1).
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1227?
CVE-2003-1227 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2003-1227?
To fix CVE-2003-1227, upgrade to Gallery version 1.5 or later, which addresses this vulnerability.
What software is affected by CVE-2003-1227?
CVE-2003-1227 affects Gallery versions 1.4 and 1.4-pl1 when running on Windows or in Configuration mode on Unix.
What type of vulnerability is CVE-2003-1227?
CVE-2003-1227 is a remote file inclusion vulnerability that allows attackers to inject arbitrary PHP code.
Can CVE-2003-1227 be exploited remotely?
Yes, CVE-2003-1227 can be exploited remotely if an attacker can control the GALLERY_BASEDIR parameter.