CVE-2004-1466: High severity Gallery Project Gallery vulnerability
The settimelimit function in Gallery before 1.4.4p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using savephotos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1466?
CVE-2004-1466 has a moderate severity rating due to the potential for arbitrary script execution before file deletion.
How do I fix CVE-2004-1466?
To fix CVE-2004-1466, upgrade Gallery software to version 1.4.4_p2 or later.
What versions of Gallery are affected by CVE-2004-1466?
CVE-2004-1466 affects Gallery versions before 1.4.4_p2.
Can CVE-2004-1466 lead to remote code execution?
Yes, CVE-2004-1466 can allow remote attackers to upload and execute arbitrary scripts.
Is CVE-2004-1466 still a concern for current systems?
CVE-2004-1466 is primarily a historical issue, but any outdated systems running vulnerable Gallery versions should be updated.