Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation

To: debian-security@lists.debian.org
Subject: Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation
From: Emmanuel Lacour <elacour@easter-eggs.com>
Date: Wed, 2 Nov 2005 15:33:07 +0100
Message-id: <[🔎] 20051102143307.GD4882@easter-eggs.com>
Mail-followup-to: Emmanuel Lacour <elacour@easter-eggs.com>, debian-security@lists.debian.org
In-reply-to: <[🔎] 20051102140154.GB2099@rollcage.inittab.de>
References: <m1EXBb0-000p69C@finlandia.Infodrom.North.DE> <[🔎] 20051102140154.GB2099@rollcage.inittab.de>

On Wed, Nov 02, 2005 at 03:01:54PM +0100, Norbert Tretkowski wrote:
> * Martin Schulze wrote:
> > A bug in gallery has been discoverd that grants all registrated
> > postnuke users full access to the gallery.
>   ^^^^^^^^
> Huh?
> 
Gallery can be easily embedded in postnuke, phpnike, mambo, ...

-- 
Emmanuel Lacour ------------------------------------ Easter-eggs
44-46 rue de l'Ouest  -  75014 Paris   -   France -  MÃ©tro GaitÃ©
Phone: +33 (0) 1 43 35 00 37    -     Fax: +33 (0) 1 41 35 00 76
mailto:elacour@easter-eggs.com   -    http://www.easter-eggs.com

Reply to:

References:
- Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation
  - From: Norbert Tretkowski <norbert@tretkowski.de>

Prev by Date: Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation
Next by Date: Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation
Previous by thread: Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation
Next by thread: Re: [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation
Index(es):
- Date
- Thread