PT-2005-4811 · Phpmyadmin · Phpmyadmin

Stefan Esser · Publicado 2005-12-08 · Atualizado 2018-10-19 · CVE-2005-4079

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin version 2.7.0 rc1

Description The issue in phpMyAdmin allows remote attackers to exploit other weaknesses by modifying the import blacklist variable in grab globals.php. This can then be used to overwrite other variables, potentially leading to further exploitation.

Recommendations For phpMyAdmin version 2.7.0 rc1, consider restricting access to the grab globals.php file or modifying the import blacklist variable to prevent unauthorized changes until a patch is available.

Correção

Identificadores relacionados

CVE-2005-4079

Produtos afetados

Phpmyadmin

Referências · 15

• http://phpmyadmin.net/home_page/downloads.php?relnotes=0 · Nota
• http://securityfocus.com/archive/1/423142/100/0/threaded · Aviso do Fabricante
• http://osvdb.org/21508 · Nota
• http://secunia.com/advisories/17957 · Nota
• http://secunia.com/advisories/18618 · Nota
• http://securityfocus.com/archive/1/418834/100/0/threaded · Nota
• http://gentoo.org/security/en/glsa/glsa-200512-03.xml · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4079 · Nota
• http://secunia.com/advisories/17925 · Aviso do Fabricante
• http://securityfocus.com/bid/15761 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4079 · Nota de Segurança
• http://phpmyadmin.net/home_page/security.php?issue=PMASA-2005-9 · Nota
• http://vupen.com/english/advisories/2005/2792 · Nota
• http://securityreason.com/securityalert/237 · Nota
• http://hardened-php.net/advisory_252005.110.html · Aviso do Fabricante