| CNNVD-ID编号 | CNNVD-200603-145 |
| CVE编号 | CVE-2006-1128 |
| 发布时间 | 2006-03-09 |
| 更新时间 | 2006-03-10 |
| 漏洞类型 | 路径遍历 |
| 漏洞来源 | James Bercegay is credited with the discovery of this vulnerability. |
| 危险等级 | 中危 |
| 威胁类型 | 远程 |
| 厂 商 | gallery_project |
Gallery 2至2.0.2的会话处理类中存在目录遍历漏洞(GallerySession.class) ，远程攻击者可以通过在Cookie中指定会话，访问和删除文件，在会话值被清除前用于构建文件路径。
目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：
Gallery 2.0
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Beta3
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Beta2
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Beta1
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha3
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha1
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha4
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0 Alpha2
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0.1
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
Gallery Gallery 2.0.2
Gallery gallery-2.0.3-typical.tar.gz
http://prdownloads.sourceforge.net/gallery/gallery-2.0.3-typical.tar.gz
来源: VUPEN
名称: ADV-2006-0813
来源: SECTRACK
名称: 1015717
来源: SECUNIA
名称: 19104
来源: OSVDB
名称: 23597
来源: MISC
链接：http://www.gulftech.org/?node=research&article_id=00106-03022006
来源: BUGTRAQ
名称: 20060303 Gallery 2 Multiple Vulnerabilities
链接：http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html
来源: XF
名称: gallery-sessionid-bypass-security(25118)
来源: BID
名称: 16948