Gallery.pm in Apache::Gallery (aka A::G) uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Apache_gallery | Apache_gallery | 0.4 | 0.4 |
Apache_gallery | Apache_gallery | 0.5.1 | 0.5.1 |
Apache_gallery | Apache_gallery | 0.6 | 0.6 |
Apache_gallery | Apache_gallery | 0.5 | 0.5 |
Apache_gallery | Apache_gallery | 0.4.1 | 0.4.1 |