PT-2005-4811 · Phpmyadmin · Phpmyadmin

Stefan Esser · Published 2005-12-08 · Updated 2018-10-19 · CVE-2005-4079

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin version 2.7.0 rc1

Description The issue in phpMyAdmin allows remote attackers to exploit other weaknesses by modifying the import blacklist variable in grab globals.php. This can then be used to overwrite other variables, potentially leading to further exploitation.

Recommendations For phpMyAdmin version 2.7.0 rc1, consider restricting access to the grab globals.php file or modifying the import blacklist variable to prevent unauthorized changes until a patch is available.

Fix

Related Identifiers

CVE-2005-4079

Affected Products

Phpmyadmin

References · 15

• http://securityfocus.com/archive/1/423142/100/0/threaded · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200512-03.xml · Vendor Advisory
• http://secunia.com/advisories/17925 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4079 · Security Note
• http://hardened-php.net/advisory_252005.110.html · Vendor Advisory
• http://phpmyadmin.net/home_page/downloads.php?relnotes=0 · Note
• http://osvdb.org/21508 · Note
• http://secunia.com/advisories/17957 · Note
• http://secunia.com/advisories/18618 · Note
• http://securityfocus.com/archive/1/418834/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4079 · Note
• http://securityfocus.com/bid/15761 · Note
• http://phpmyadmin.net/home_page/security.php?issue=PMASA-2005-9 · Note
• http://vupen.com/english/advisories/2005/2792 · Note
• http://securityreason.com/securityalert/237 · Note