|
|
Family: Debian Local Security Checks --> Category: infos
[DSA1148] DSA-1148-1 gallery Vulnerability Scan
Vulnerability Scan Summary
DSA-1148-1 gallery
Detailed Explanation for this Vulnerability Test
Several remote vulnerabilities have been discovered in gallery, a web-based
photo album. The Common Vulnerabilities and Exposures project identifies
the following problems:
A cross-site scripting vulnerability allows injection of web script
code through HTML or EXIF information.
A cross-site scripting vulnerability in the user registration allows
injection of web script code.
Missing input sanitising in the stats modules allows information
disclosure.
For the stable distribution (sarge) these problems have been fixed in
version 1.5-1sarge2.
For the unstable distribution (sid) these problems have been fixed in
version 1.5-2.
We recommend that you upgrade your gallery package.
Solution : http://www.debian.org/security/2006/dsa-1148
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
