CVE-2005-3251: Medium severity Gallery Project Gallery vulnerability
Published Oct 17, 2005
·Updated
Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2itemId parameter.
Affected Software
8 affected components
Gallery Project Gallery=2.0
Gallery Project Gallery=2.0_alpha1
Gallery Project Gallery=2.0_alpha2
Gallery Project Gallery=2.0_alpha3
Gallery Project Gallery=2.0_alpha4
Gallery Project Gallery=2.0_beta1
Gallery Project Gallery=2.0_beta2
Gallery Project Gallery=2.0_beta3
Remediation
Patch Available
Event History
Oct 17, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3251?
CVE-2005-3251 is considered a high severity vulnerability due to its potential for remote exploitation and unauthorized file access.
2
How do I fix CVE-2005-3251?
To fix CVE-2005-3251, upgrade to a patched version of Gallery, preferably version 2.0.1 or later.
3
Which versions of Gallery are affected by CVE-2005-3251?
CVE-2005-3251 affects Gallery versions 2.0, 2.0_alpha1, 2.0_alpha2, 2.0_alpha3, 2.0_alpha4, and 2.0_beta1 through 2.0_beta3.
4
What type of vulnerability is CVE-2005-3251?
CVE-2005-3251 is a directory traversal vulnerability that allows attackers to read or include arbitrary files.
5
Can CVE-2005-3251 be exploited remotely?
Yes, CVE-2005-3251 can be exploited remotely by attackers through specially crafted requests.