forum.coppermine-gallery.net

Support => cpg1.4.x Support => Older/other versions => cpg1.4 miscellaneous => Topic started by: ComputerLady on April 19, 2006, 09:01:05 pm

Title: Imei flaw
Post by: ComputerLady on April 19, 2006, 09:01:05 pm

Pardon my confusion here, but I found a post in imei's Bug Blog regarding a 'new' remote code execution flaw found in Coppermine 1.4.4:

http://myimei.com/security/2006-04-14/copperminephotogallery144-plugininclusionsystemindexphp-remotefileinclusion-attack.html

I'm having a lot of trouble understanding the discussion surrounding the code sited, and if this is something those of us using Coppermine should be concerned. That bug report was reflected out through Secunia's Latest Security Advisories RSS feed, but I don't see much supporting evidence in the blog post. But then, following some of that is beyond me at present.

So, my question is, is this a new bug or something we can safely ignore? (My hosting service insisted everyone update to v1.4.4 of Coppermine or face having their install of Coppermine removed after that last bug.)  ::)

Thanks! 

Title: Re: Patch for Coppermine 1.4.4 remote code execution flaw
Post by: Joachim Müller on April 19, 2006, 10:24:06 pm

split from http://forum.coppermine-gallery.net/index.php?topic=28079.0, which was a split-off from another different thread. Don't hijack threads, especially those that deal with security issues, as it will get increasingly hard for others to keep track. Search the board before posting, this is being discussed already!

Title: Re: Imei flaw
Post by: ComputerLady on April 19, 2006, 10:33:46 pm

Finally found public discussion on this here:
http://forum.coppermine-gallery.net/index.php?topic=30504.0

Will turn on notifications for that thread so I can track this...

Title: Re: Imei flaw
Post by: Joachim Müller on April 19, 2006, 10:35:11 pm

you better turn on notifications for the announcement board...

Title: Re: Imei flaw
Post by: ComputerLady on April 19, 2006, 11:40:22 pm

Did that again, as that must have stopped working again... Thanks for the reminder!

Title: Re: Imei flaw
Post by: Joachim Müller on April 21, 2006, 09:25:32 am

http://forum.coppermine-gallery.net/index.php?topic=30655.0