PT-2010-1242 · Phpmyadmin · Phpmyadmin

Publicado 2010-01-19 · Atualizado 2010-05-06 · CVE-2008-7251

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 2.11.x through 2.11.9

Description The issue in phpMyAdmin creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.

Recommendations For phpMyAdmin versions 2.11.x through 2.11.9, update to version 2.11.10 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-7251

DSA-2034-1

Produtos afetados

Phpmyadmin

Referências · 14

• https://osv.dev/vulnerability/CVE-2008-7251 · Aviso do Fabricante
• http://securityfocus.com/bid/37826 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7251 · Nota de Segurança
• http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php?r1=11536&r2=11535&pathrev=11536 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-7251 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2008-7251 · Aviso do Fabricante
• http://debian.org/security/2010/dsa-2034 · Aviso do Fabricante
• http://phpmyadmin.net/home_page/security/PMASA-2010-1.php · Aviso do Fabricante
• http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=11536 · Nota
• http://secunia.com/advisories/39503 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7251 · Nota
• http://secunia.com/advisories/38211 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/0910 · Aviso do Fabricante