PT-2015-5661 · Phpmyadmin+1 · Phpmyadmin+1

Jian Jiang + 1 · Published 2014-05-05 · Updated 2024-06-15 · CVE-2015-2206

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.8 phpMyAdmin versions 4.2.x through 4.2.13.1 phpMyAdmin versions 4.3.x through 4.3.11.0

Description The issue allows remote attackers to conduct a BREACH attack and determine the CSRF token via a series of crafted requests. This is due to invalid language values in unknown-language error responses that contain a CSRF token and may be sent with HTTP compression.

Recommendations For phpMyAdmin versions 4.0.x through 4.0.10.8, update to version 4.0.10.9 or later. For phpMyAdmin versions 4.2.x through 4.2.13.1, update to version 4.2.13.2 or later. For phpMyAdmin versions 4.3.x through 4.3.11.0, update to version 4.3.11.1 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2014-1591

ALT-PU-2016-1527

CVE-2015-2206

DLA-336-1

DSA-3382-1

OPENSUSE-SU-2024:10054-1

Affected Products

Alt Linux

Phpmyadmin

References · 220

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadmin_null_termination_exec.rb · Exploit
• 🔥 https://github.com/coffeehb/Some-PoC-oR-ExP/blob/master/PhpMyAdmin/phpmyadmin4.6.2_RCE.py · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5734 · Security Note
• https://ubuntu.com/security/CVE-2015-2206 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151931.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1879 · Security Note
• https://osv.dev/vulnerability/CVE-2015-2206 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2016-1527 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6613 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6626 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5739 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000013 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4412 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000015 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5706 · Security Note