PT-2004-3522 · Php · Phpmyadmin

Publicado 2004-12-31 · Atualizado 2017-07-20 · CVE-2004-2632

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 2.5.1 through 2.5.7

Description The issue allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers. This is achieved by modifying the cfg['Servers'] variables.

Recommendations For phpMyAdmin versions 2.5.1 through 2.5.7, consider restricting access to the configuration settings to prevent modification of the cfg['Servers'] variables until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-2632

Produtos afetados

Phpmyadmin

Referências · 15

• 🔥 http://securitytracker.com/alerts/2004/Jun/1010614.html · Exploit
• 🔥 http://securityfocus.com/bid/10629 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2004-06/0444.html · Exploit
• 🔥 http://eagle.kecapi.com/sec/fd/phpMyAdmin.html · Exploit
• http://osvdb.org/7315 · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-2632 · Aviso do Fabricante
• http://secunia.com/advisories/11974 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2004-06/0473.html · Nota
• https://osv.dev/vulnerability/CVE-2004-2632 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2004-2632 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-2632 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2632 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16555 · Nota
• http://gentoo.org/security/en/glsa/glsa-200407-22.xml · Correção, Aviso do Fabricante
• http://phpmyadmin.net/home_page/security.php?issue=PMASA-2004-1 · Correção