Search

Find a vulnerability

Search criteria

    4 vulnerabilities by bharat_mediratta

    CVE-2003-1428 (GCVE-0-2003-1428)

    Vulnerability from cvelistv5 – Published: 2007-10-20 10:00 – Updated: 2024-08-08 02:28
    VLAI
    Summary
    Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2158 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/bid/6809 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/311161 mailing-listx_refsource_BUGTRAQ
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    Date Public
    2003-02-09 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-08T02:28:03.659Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "6809",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/6809"
              },
              {
                "name": "20030210 Gallery 1.3.3",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/311161"
              },
              {
                "name": "gallery-album-insecure-directory(11284)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11284"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2003-02-09T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "6809",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/6809"
            },
            {
              "name": "20030210 Gallery 1.3.3",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/311161"
            },
            {
              "name": "gallery-album-insecure-directory(11284)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11284"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2003-1428",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "6809",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/6809"
                },
                {
                  "name": "20030210 Gallery 1.3.3",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/311161"
                },
                {
                  "name": "gallery-album-insecure-directory(11284)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11284"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2003-1428",
        "datePublished": "2007-10-20T10:00:00.000Z",
        "dateReserved": "2007-10-19T00:00:00.000Z",
        "dateUpdated": "2024-08-08T02:28:03.659Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-4650 (GCVE-0-2007-4650)

    Vulnerability from cvelistv5 – Published: 2007-09-04 17:00 – Updated: 2024-08-07 15:01
    VLAI
    Summary
    Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV and (b) Reupload modules.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2158 records in the last 180 days details
    References
    URL Tags
    http://security.gentoo.org/glsa/glsa-200711-03.xml vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/26719 third-party-advisoryx_refsource_SECUNIA
    http://osvdb.org/41657 vdb-entryx_refsource_OSVDB
    http://www.vupen.com/english/advisories/2007/3072 vdb-entryx_refsource_VUPEN
    http://www.debian.org/security/2007/dsa-1404 vendor-advisoryx_refsource_DEBIAN
    http://osvdb.org/41658 vdb-entryx_refsource_OSVDB
    http://secunia.com/advisories/27594 third-party-advisoryx_refsource_SECUNIA
    https://bugzilla.redhat.com/show_bug.cgi?id=267421 x_refsource_MISC
    https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
    http://www.securityfocus.com/bid/25580 vdb-entryx_refsource_BID
    http://gallery.menalto.com/gallery_2.2.3_released x_refsource_CONFIRM
    http://secunia.com/advisories/26716 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/27502 third-party-advisoryx_refsource_SECUNIA
    http://bugs.gentoo.org/show_bug.cgi?id=191587 x_refsource_CONFIRM
    Date Public
    2007-08-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T15:01:09.902Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "GLSA-200711-03",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://security.gentoo.org/glsa/glsa-200711-03.xml"
              },
              {
                "name": "26719",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26719"
              },
              {
                "name": "41657",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/41657"
              },
              {
                "name": "ADV-2007-3072",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/3072"
              },
              {
                "name": "DSA-1404",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
                  "x_transferred"
                ],
                "url": "http://www.debian.org/security/2007/dsa-1404"
              },
              {
                "name": "41658",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/41658"
              },
              {
                "name": "27594",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/27594"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=267421"
              },
              {
                "name": "FEDORA-2007-2020",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html"
              },
              {
                "name": "25580",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/25580"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://gallery.menalto.com/gallery_2.2.3_released"
              },
              {
                "name": "26716",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26716"
              },
              {
                "name": "27502",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/27502"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.gentoo.org/show_bug.cgi?id=191587"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2007-08-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using \"linked items\" in WebDAV and (b) Reupload modules."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-11-07T10:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "GLSA-200711-03",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://security.gentoo.org/glsa/glsa-200711-03.xml"
            },
            {
              "name": "26719",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26719"
            },
            {
              "name": "41657",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/41657"
            },
            {
              "name": "ADV-2007-3072",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/3072"
            },
            {
              "name": "DSA-1404",
              "tags": [
                "vendor-advisory",
                "x_refsource_DEBIAN"
              ],
              "url": "http://www.debian.org/security/2007/dsa-1404"
            },
            {
              "name": "41658",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/41658"
            },
            {
              "name": "27594",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/27594"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=267421"
            },
            {
              "name": "FEDORA-2007-2020",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html"
            },
            {
              "name": "25580",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/25580"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://gallery.menalto.com/gallery_2.2.3_released"
            },
            {
              "name": "26716",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26716"
            },
            {
              "name": "27502",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/27502"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=191587"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2007-4650",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using \"linked items\" in WebDAV and (b) Reupload modules."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "GLSA-200711-03",
                  "refsource": "GENTOO",
                  "url": "http://security.gentoo.org/glsa/glsa-200711-03.xml"
                },
                {
                  "name": "26719",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26719"
                },
                {
                  "name": "41657",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/41657"
                },
                {
                  "name": "ADV-2007-3072",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/3072"
                },
                {
                  "name": "DSA-1404",
                  "refsource": "DEBIAN",
                  "url": "http://www.debian.org/security/2007/dsa-1404"
                },
                {
                  "name": "41658",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/41658"
                },
                {
                  "name": "27594",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/27594"
                },
                {
                  "name": "https://bugzilla.redhat.com/show_bug.cgi?id=267421",
                  "refsource": "MISC",
                  "url": "https://bugzilla.redhat.com/show_bug.cgi?id=267421"
                },
                {
                  "name": "FEDORA-2007-2020",
                  "refsource": "FEDORA",
                  "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html"
                },
                {
                  "name": "25580",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/25580"
                },
                {
                  "name": "http://gallery.menalto.com/gallery_2.2.3_released",
                  "refsource": "CONFIRM",
                  "url": "http://gallery.menalto.com/gallery_2.2.3_released"
                },
                {
                  "name": "26716",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26716"
                },
                {
                  "name": "27502",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/27502"
                },
                {
                  "name": "http://bugs.gentoo.org/show_bug.cgi?id=191587",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.gentoo.org/show_bug.cgi?id=191587"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2007-4650",
        "datePublished": "2007-09-04T17:00:00.000Z",
        "dateReserved": "2007-09-04T00:00:00.000Z",
        "dateUpdated": "2024-08-07T15:01:09.902Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-4650 (GCVE-0-2007-4650)

    Vulnerability from nvd – Published: 2007-09-04 17:00 – Updated: 2024-08-07 15:01
    VLAI
    Summary
    Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV and (b) Reupload modules.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2158 records in the last 180 days details
    References
    URL Tags
    http://security.gentoo.org/glsa/glsa-200711-03.xml vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/26719 third-party-advisoryx_refsource_SECUNIA
    http://osvdb.org/41657 vdb-entryx_refsource_OSVDB
    http://www.vupen.com/english/advisories/2007/3072 vdb-entryx_refsource_VUPEN
    http://www.debian.org/security/2007/dsa-1404 vendor-advisoryx_refsource_DEBIAN
    http://osvdb.org/41658 vdb-entryx_refsource_OSVDB
    http://secunia.com/advisories/27594 third-party-advisoryx_refsource_SECUNIA
    https://bugzilla.redhat.com/show_bug.cgi?id=267421 x_refsource_MISC
    https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
    http://www.securityfocus.com/bid/25580 vdb-entryx_refsource_BID
    http://gallery.menalto.com/gallery_2.2.3_released x_refsource_CONFIRM
    http://secunia.com/advisories/26716 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/27502 third-party-advisoryx_refsource_SECUNIA
    http://bugs.gentoo.org/show_bug.cgi?id=191587 x_refsource_CONFIRM
    Date Public
    2007-08-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T15:01:09.902Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "GLSA-200711-03",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://security.gentoo.org/glsa/glsa-200711-03.xml"
              },
              {
                "name": "26719",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26719"
              },
              {
                "name": "41657",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/41657"
              },
              {
                "name": "ADV-2007-3072",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/3072"
              },
              {
                "name": "DSA-1404",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
                  "x_transferred"
                ],
                "url": "http://www.debian.org/security/2007/dsa-1404"
              },
              {
                "name": "41658",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/41658"
              },
              {
                "name": "27594",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/27594"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=267421"
              },
              {
                "name": "FEDORA-2007-2020",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html"
              },
              {
                "name": "25580",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/25580"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://gallery.menalto.com/gallery_2.2.3_released"
              },
              {
                "name": "26716",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26716"
              },
              {
                "name": "27502",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/27502"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.gentoo.org/show_bug.cgi?id=191587"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2007-08-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using \"linked items\" in WebDAV and (b) Reupload modules."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-11-07T10:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "GLSA-200711-03",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://security.gentoo.org/glsa/glsa-200711-03.xml"
            },
            {
              "name": "26719",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26719"
            },
            {
              "name": "41657",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/41657"
            },
            {
              "name": "ADV-2007-3072",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/3072"
            },
            {
              "name": "DSA-1404",
              "tags": [
                "vendor-advisory",
                "x_refsource_DEBIAN"
              ],
              "url": "http://www.debian.org/security/2007/dsa-1404"
            },
            {
              "name": "41658",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/41658"
            },
            {
              "name": "27594",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/27594"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=267421"
            },
            {
              "name": "FEDORA-2007-2020",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html"
            },
            {
              "name": "25580",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/25580"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://gallery.menalto.com/gallery_2.2.3_released"
            },
            {
              "name": "26716",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26716"
            },
            {
              "name": "27502",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/27502"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=191587"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2007-4650",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using \"linked items\" in WebDAV and (b) Reupload modules."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "GLSA-200711-03",
                  "refsource": "GENTOO",
                  "url": "http://security.gentoo.org/glsa/glsa-200711-03.xml"
                },
                {
                  "name": "26719",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26719"
                },
                {
                  "name": "41657",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/41657"
                },
                {
                  "name": "ADV-2007-3072",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/3072"
                },
                {
                  "name": "DSA-1404",
                  "refsource": "DEBIAN",
                  "url": "http://www.debian.org/security/2007/dsa-1404"
                },
                {
                  "name": "41658",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/41658"
                },
                {
                  "name": "27594",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/27594"
                },
                {
                  "name": "https://bugzilla.redhat.com/show_bug.cgi?id=267421",
                  "refsource": "MISC",
                  "url": "https://bugzilla.redhat.com/show_bug.cgi?id=267421"
                },
                {
                  "name": "FEDORA-2007-2020",
                  "refsource": "FEDORA",
                  "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html"
                },
                {
                  "name": "25580",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/25580"
                },
                {
                  "name": "http://gallery.menalto.com/gallery_2.2.3_released",
                  "refsource": "CONFIRM",
                  "url": "http://gallery.menalto.com/gallery_2.2.3_released"
                },
                {
                  "name": "26716",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26716"
                },
                {
                  "name": "27502",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/27502"
                },
                {
                  "name": "http://bugs.gentoo.org/show_bug.cgi?id=191587",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.gentoo.org/show_bug.cgi?id=191587"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2007-4650",
        "datePublished": "2007-09-04T17:00:00.000Z",
        "dateReserved": "2007-09-04T00:00:00.000Z",
        "dateUpdated": "2024-08-07T15:01:09.902Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2003-1428 (GCVE-0-2003-1428)

    Vulnerability from nvd – Published: 2007-10-20 10:00 – Updated: 2024-08-08 02:28
    VLAI
    Summary
    Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2158 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/bid/6809 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/311161 mailing-listx_refsource_BUGTRAQ
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    Date Public
    2003-02-09 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-08T02:28:03.659Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "6809",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/6809"
              },
              {
                "name": "20030210 Gallery 1.3.3",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/311161"
              },
              {
                "name": "gallery-album-insecure-directory(11284)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11284"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2003-02-09T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "6809",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/6809"
            },
            {
              "name": "20030210 Gallery 1.3.3",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/311161"
            },
            {
              "name": "gallery-album-insecure-directory(11284)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11284"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2003-1428",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Gallery 1.3.3 creates directories with insecure permissions, which allows local users to read, modify, or delete photos."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "6809",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/6809"
                },
                {
                  "name": "20030210 Gallery 1.3.3",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/311161"
                },
                {
                  "name": "gallery-album-insecure-directory(11284)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11284"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2003-1428",
        "datePublished": "2007-10-20T10:00:00.000Z",
        "dateReserved": "2007-10-19T00:00:00.000Z",
        "dateUpdated": "2024-08-08T02:28:03.659Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }