PT-2005-1696 · Php · Phpmyadmin

Maksymilian Arciemowicz · Published 2005-03-07 · Updated 2008-09-05 · CVE-2005-0653

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin version 2.6.1

Description The issue concerns improper permission granting on tables with an underscore in the name, allowing remote authenticated users to have more privileges than intended.

Recommendations For phpMyAdmin version 2.6.1, update to a newer version that properly handles permissions for tables with underscores in their names to prevent unintended privilege escalation.

Fix

Related Identifiers

CVE-2005-0653

Affected Products

Phpmyadmin

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-0653 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0653 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0653 · Vendor Advisory
• http://bugs.gentoo.org/show_bug.cgi?id=83792 · Patch
• https://security-tracker.debian.org/tracker/CVE-2005-0653 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200503-07.xml · Patch, Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0653 · Note