PT-2011-3907 · Phpmyadmin · Phpmyadmin

Frans Pehrson · Published 2011-07-14 · Updated 2022-05-14 · CVE-2011-2508

Positive Technologies (AI Summary)

CVSS v4.0

7.4

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.x prior to 3.3.10.2 phpMyAdmin versions 3.4.x prior to 3.4.3.1

Description The issue allows remote authenticated users to include and execute arbitrary local files. This is possible when a certain MIME transformation feature is enabled. The vulnerability can be exploited via a .. (dot dot) in a GLOBALS[mime map][$meta->name][transformation] parameter.

Recommendations For phpMyAdmin versions 3.x prior to 3.3.10.2, update to version 3.3.10.2 or later. For phpMyAdmin versions 3.4.x prior to 3.4.3.1, update to version 3.4.3.1 or later. As a temporary workaround, consider disabling the MIME transformation feature until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-2508

DSA-2286-1

GHSA-Q6VW-39CG-WJJF

Affected Products

Phpmyadmin

References · 31

• 🔥 http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html · Exploit
• http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2508 · Vendor Advisory
• http://debian.org/security/2011/dsa-2286 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2508 · Security Note
• http://secunia.com/advisories/45139 · Vendor Advisory
• http://phpmyadmin.net/home_page/security/PMASA-2011-8.php · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2508 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:124 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2508 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q6vw-39cg-wjjf · Vendor Advisory
• https://github.com/phpmyadmin/phpmyadmin · Note
• http://openwall.com/lists/oss-security/2011/06/28/2 · Note
• http://secunia.com/advisories/45315 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2508 · Note