Advanced search  

News:

CPG Release 1.6.26
Correct PHP8.2 issues with user and language managers.
Additional fixes for PHP 8.2
Correct PHP8 error with SMF 2.0 bridge.
Correct IPTC supplimental category parsing.
Download and info HERE

Pages: [1]   Go Down

Author Topic: Imei flaw  (Read 4683 times)

0 Members and 1 Guest are viewing this topic.

ComputerLady

  • Coppermine novice
  • *
  • Offline Offline
  • Gender: Female
  • Posts: 23
    • Design COMP
Imei flaw
« on: April 19, 2006, 09:01:05 pm »
Pardon my confusion here, but I found a post in imei's Bug Blog regarding a 'new' remote code execution flaw found in Coppermine 1.4.4:

http://myimei.com/security/2006-04-14/copperminephotogallery144-plugininclusionsystemindexphp-remotefileinclusion-attack.html

I'm having a lot of trouble understanding the discussion surrounding the code sited, and if this is something those of us using Coppermine should be concerned. That bug report was reflected out through Secunia's Latest Security Advisories RSS feed, but I don't see much supporting evidence in the blog post. But then, following some of that is beyond me at present.

So, my question is, is this a new bug or something we can safely ignore? (My hosting service insisted everyone update to v1.4.4 of Coppermine or face having their install of Coppermine removed after that last bug.)  ::)

Thanks! 
« Last Edit: April 21, 2006, 09:25:46 am by GauGau »
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: Patch for Coppermine 1.4.4 remote code execution flaw
« Reply #1 on: April 19, 2006, 10:24:06 pm »
split from http://forum.coppermine-gallery.net/index.php?topic=28079.0, which was a split-off from another different thread. Don't hijack threads, especially those that deal with security issues, as it will get increasingly hard for others to keep track. Search the board before posting, this is being discussed already!
Logged

ComputerLady

  • Coppermine novice
  • *
  • Offline Offline
  • Gender: Female
  • Posts: 23
    • Design COMP
Re: Imei flaw
« Reply #2 on: April 19, 2006, 10:33:46 pm »
Finally found public discussion on this here:
http://forum.coppermine-gallery.net/index.php?topic=30504.0

Will turn on notifications for that thread so I can track this...
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: Imei flaw
« Reply #3 on: April 19, 2006, 10:35:11 pm »
you better turn on notifications for the announcement board...
Logged

ComputerLady

  • Coppermine novice
  • *
  • Offline Offline
  • Gender: Female
  • Posts: 23
    • Design COMP
Re: Imei flaw
« Reply #4 on: April 19, 2006, 11:40:22 pm »
Did that again, as that must have stopped working again... Thanks for the reminder!
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: Imei flaw
« Reply #5 on: April 21, 2006, 09:25:32 am »
Logged
Pages: [1]   Go Up
« previous next »
 

Page created in 0.025 seconds with 19 queries.