PT-2011-4041 · Phpmyadmin · Phpmyadmin

Published 2011-08-01 · Updated 2023-02-13 · CVE-2011-2719

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.x prior to 3.3.10.3 phpMyAdmin versions 3.4.x prior to 3.4.3.2

Description The issue is related to the management of sessions associated with Swekey authentication in the phpMyAdmin software. This allows remote attackers to modify certain superglobal arrays and local variables via a crafted query string.

Recommendations For phpMyAdmin versions 3.x prior to 3.3.10.3, update to version 3.3.10.3 or later. For phpMyAdmin versions 3.4.x prior to 3.4.3.2, update to version 3.4.3.2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-2719

DSA-2286-1

Affected Products

Phpmyadmin

References · 26

• https://osv.dev/vulnerability/CVE-2011-2719 · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/07/26/10 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-2719 · Security Note
• http://debian.org/security/2011/dsa-2286 · Vendor Advisory
• http://secunia.com/advisories/45365 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2719 · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/07/25/4 · Patch
• http://phpmyadmin.net/home_page/security/PMASA-2011-12.php · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2719 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:124 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=725384 · Patch
• http://securityfocus.com/archive/1/519155/100/0/threaded · Note
• http://secunia.com/advisories/45315 · Note