Fedora 16 : gallery3-3.0.4-1.fc16 (2012-9666)

NASLDB: Fedora 16 : gallery3-3.0.4-1.fc16 (2012-9666)

General

ID: 59743
Name: Fedora 16 : gallery3-3.0.4-1.fc16 (2012-9666)

Summary: Checks rpm output for the updated package

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: –

Port: 0
Family: Fedora Local Security Checks
Type: Local

Description

Gallery 3.0.4 was released with the following release notes :

After several extensive internal and external security audits which
discovered 22 distinct vulnerabilities, we are releasing Gallery 3.0.4
as a security release. All of the issues require that someone with
malicious intent either have an account with edit permissions, or
trick a user with edit permissions into clicking on a malicious link.
In most cases, this can only lead to a possible XSS vulnerability, but
in several instances it allows arbitrary PHP code execution.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2012-4342
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2012/06/19
Plugin Release: 2012/06/28

Plugin

Version: 1.2
Filename: fedora_2012-9666.nasl
Filesize: 3331 bytes
MD5 Hash: 4aca1597842481a525e8b9d1dd097249

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG