Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://marc.theaimsgroup.com/?l=bugtraq&m=107524414317693 http://www.vuxml.org/freebsd/12b1a62d-6056-4d90-9e21-45fcde6abae4.html
Insight
The following package is affected: gallery
CVE-2004-2124
The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote code injection attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.
Severity
Classification
-
CVE CVE-2004-2124 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
Related Vulnerabilities