PT-2005-1696 · Php · Phpmyadmin

Maksymilian Arciemowicz · Publicado 2005-03-07 · Atualizado 2008-09-05 · CVE-2005-0653

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin version 2.6.1

Description The issue concerns improper permission granting on tables with an underscore in the name, allowing remote authenticated users to have more privileges than intended.

Recommendations For phpMyAdmin version 2.6.1, update to a newer version that properly handles permissions for tables with underscores in their names to prevent unintended privilege escalation.

Correção

Identificadores relacionados

CVE-2005-0653

Produtos afetados

Phpmyadmin

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-0653 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0653 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200503-07.xml · Correção, Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0653 · Nota
• https://osv.dev/vulnerability/CVE-2005-0653 · Aviso do Fabricante
• http://bugs.gentoo.org/show_bug.cgi?id=83792 · Correção
• https://security-tracker.debian.org/tracker/CVE-2005-0653 · Aviso do Fabricante