CVE-2006-2514: High severity Coppermine Coppermine Photo Gallery vulnerability
Published May 22, 2006
·Updated
Coppermine galleries before 1.4.6, when running on Apache with modmime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions.
Affected Software
14 affected components
Coppermine Coppermine Photo Gallery<=1.4.5
Coppermine Coppermine Photo Gallery=1.0_rc3
Coppermine Coppermine Photo Gallery=1.1.0
Coppermine Coppermine Photo Gallery=1.1_beta_2
Coppermine Coppermine Photo Gallery=1.2
Coppermine Coppermine Photo Gallery=1.2.1
Coppermine Coppermine Photo Gallery=1.2.2_b
Coppermine Coppermine Photo Gallery=1.3
Coppermine Coppermine Photo Gallery=1.3.2
Coppermine Coppermine Photo Gallery=1.3.3
Coppermine Coppermine Photo Gallery=1.4.2
Coppermine Coppermine Photo Gallery=1.4.3
Coppermine Coppermine Photo Gallery=1.4.4
Coppermine Coppermine Photo Gallery=1.4_beta
Remediation
Patch Available
Event History
May 22, 2006
CVE Published
10:02 PM
May 23, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2514?
CVE-2006-2514 is considered a high severity vulnerability due to the ability of remote attackers to upload arbitrary files.
2
How do I fix CVE-2006-2514?
To fix CVE-2006-2514, upgrade Coppermine to version 1.4.6 or later.
3
Which versions of Coppermine are affected by CVE-2006-2514?
CVE-2006-2514 affects Coppermine versions up to 1.4.5.
4
What type of attack is enabled by CVE-2006-2514?
CVE-2006-2514 allows attackers to execute malicious code through arbitrary file uploads.
5
Is CVE-2006-2514 specific to any web server?
Yes, CVE-2006-2514 is specifically noted to affect Coppermine when running on Apache with mod_mime installed.