PT-2015-5661 · Phpmyadmin+1 · Phpmyadmin+1

Jian Jiang + 1 · Publicado 2014-05-05 · Atualizado 2024-06-15 · CVE-2015-2206

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.8 phpMyAdmin versions 4.2.x through 4.2.13.1 phpMyAdmin versions 4.3.x through 4.3.11.0

Description The issue allows remote attackers to conduct a BREACH attack and determine the CSRF token via a series of crafted requests. This is due to invalid language values in unknown-language error responses that contain a CSRF token and may be sent with HTTP compression.

Recommendations For phpMyAdmin versions 4.0.x through 4.0.10.8, update to version 4.0.10.9 or later. For phpMyAdmin versions 4.2.x through 4.2.13.1, update to version 4.2.13.2 or later. For phpMyAdmin versions 4.3.x through 4.3.11.0, update to version 4.3.11.1 or later.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2014-1591

ALT-PU-2016-1527

CVE-2015-2206

DLA-336-1

DSA-3382-1

OPENSUSE-SU-2024:10054-1

Produtos afetados

Alt Linux

Phpmyadmin

Referências · 220

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadmin_null_termination_exec.rb · Exploit
• 🔥 https://github.com/coffeehb/Some-PoC-oR-ExP/blob/master/PhpMyAdmin/phpmyadmin4.6.2_RCE.py · Exploit
• https://github.com/phpmyadmin/phpmyadmin/commit/095729d81205f15f40d216d25917017da4c2fff8 · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/62b2c918d26cc78d1763945e3d44d1a63294a819 · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/1ac863c7573d12012374d5d41e5c7dc5505ea6e1 · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/b2f1e895038a5700bf8e81fb9a5da36cbdea0eeb · Nota
• https://suse.com/security/cve/CVE-2013-4995 · Nota
• https://suse.com/security/cve/CVE-2014-4955 · Nota
• https://packages.debian.org/src:phpmyadmin · Nota
• https://suse.com/security/cve/CVE-2016-6611 · Nota
• https://suse.com/security/cve/CVE-2016-6632 · Nota
• https://suse.com/security/cve/CVE-2016-6628 · Nota
• https://suse.com/security/cve/CVE-2016-6607 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5734 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-2206 · Aviso do Fabricante