CVE-2005-4021: Medium severity Gallery Project Gallery vulnerability
The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4021?
CVE-2005-4021 has a moderate severity rating due to its exposure of sensitive information.
How do I fix CVE-2005-4021?
To fix CVE-2005-4021, ensure that the installation log is stored outside the web document root or apply the update to Gallery 2.0.2 or later.
Which versions of Gallery are affected by CVE-2005-4021?
CVE-2005-4021 affects Gallery versions 2.0 through 2.0.1, as well as various alpha, beta, and release candidate versions before 2.0.2.
What kind of information can be leaked by CVE-2005-4021?
CVE-2005-4021 can potentially leak sensitive installation log details that may include database credentials and other confounding configurations.
Can CVE-2005-4021 be exploited remotely?
Yes, CVE-2005-4021 can be exploited remotely by attackers who can access the installation log due to insufficient access controls.