CVE-2005-3251

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://dipper.info/security/20051012/Exploit, Vendor Advisory
http://gallery.menalto.com/gallery_2.0.1_releasedPatch
http://secunia.com/advisories/17205
http://securityreason.com/securityalert/88
http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.htmlVendor Advisory
http://dipper.info/security/20051012/Exploit, Vendor Advisory
http://gallery.menalto.com/gallery_2.0.1_releasedPatch
http://secunia.com/advisories/17205
http://securityreason.com/securityalert/88
http://www.vuxml.org/freebsd/47bdabcf-3cf9-11da-baa2-0004614cc33d.htmlVendor Advisory

Timeline

Published: Oct 17, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-32527.5Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code v CVE-2005-32537.5Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and (2) Proxim AP CVE-2005-325410.0The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a se CVE-2005-32555.0The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, wh CVE-2005-32565.0The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, CVE-2005-32574.6The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDS CVE-2005-32585.0The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentat CVE-2005-32597.5Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands an CVE-2005-32604.3Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web CVE-2005-32615.0getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obta CVE-2005-32627.5Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifier CVE-2005-32637.5Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE