show_config_errors.php in phpMyAdmin 3.5.x before 3.5.2.1 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message, related to lack of inclusion of the common.inc.php library file.

phpMyAdmin was updated to 3.5.2.2

  - fix for bnc#776698, bnc#776701

phpMyAdmin 3.5.2.2 (2012-08-12) ===============================

  - [security] Fixed XSS vulnerabilities, see PMASA-2012-4     (http://www.phpmyadmin.net/home_page/security/PMASA-2012
    -4.php)

phpMyAdmin 3.5.2.1 (2012-08-03) ===============================

  - [security] Fixed local path disclosure vulnerability,     see PMASA-2012-3     (http://www.phpmyadmin.net/home_page/security/PMASA-2012
    -3.php)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The phpMyAdmin development team reports :

The show_config_errors.php script does not include a library, so an error message shows the full path of this file, leading to possible further attacks.

ID	Name	Product	Family	Severity
74726	openSUSE Security Update : phpMyAdmin (openSUSE-SU-2012:1062-1)	Nessus	SuSE Local Security Checks	medium
62129	Fedora 18 : phpMyAdmin-3.5.2.2-1.fc18 (2012-11962)	Nessus	Fedora Local Security Checks	medium
61699	Fedora 16 : phpMyAdmin-3.5.2.2-1.fc16 (2012-12060)	Nessus	Fedora Local Security Checks	medium
61698	Fedora 17 : phpMyAdmin-3.5.2.2-1.fc17 (2012-12031)	Nessus	Fedora Local Security Checks	medium
61504	FreeBSD : phpMyAdmin -- Path disclosure due to missing library (aca0d7e0-e38a-11e1-999b-e0cb4e266481)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2012-4219

medium

Tenable Plugins

medium

medium

medium

medium

medium