CVE-2005-3979: Medium severity Coppermine-gallery Coppermine Photo Gallery vulnerability
Published Dec 3, 2005
·Updated
relocateserver.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.
Affected Software
2 affected components
Coppermine-gallery Coppermine Photo Gallery=1.4-beta
Coppermine-gallery Coppermine Photo Gallery=1.4.2
Event History
Dec 3, 2005
CVE Published
07:03 PM
Dec 4, 2005
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3979?
CVE-2005-3979 is classified as a medium severity vulnerability.
2
How do I fix CVE-2005-3979?
To fix CVE-2005-3979, remove the relocate_server.php file from your Coppermine Photo Gallery installation.
3
What vulnerabilities does CVE-2005-3979 introduce?
CVE-2005-3979 introduces the risk of unauthorized access to sensitive information, including database configuration.
4
What versions of Coppermine Photo Gallery are affected by CVE-2005-3979?
CVE-2005-3979 affects Coppermine Photo Gallery versions 1.4.2 and 1.4 beta.
5
Can CVE-2005-3979 be exploited remotely?
Yes, CVE-2005-3979 can be exploited remotely since it allows direct requests without authentication.