Описание
Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:apache_gallery:apache_gallery:0.4:*:*:*:*:*:*:*
cpe:2.3:a:apache_gallery:apache_gallery:0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:apache_gallery:apache_gallery:0.5:*:*:*:*:*:*:*
cpe:2.3:a:apache_gallery:apache_gallery:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:apache_gallery:apache_gallery:0.6:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.00086
Низкий
4.6 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
debian
почти 22 года назад
Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary fi ...
github
больше 3 лет назад
Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does.
EPSS
Процентиль: 26%
0.00086
Низкий
4.6 Medium
CVSS2
Дефекты
NVD-CWE-Other