Detections
Analytics
GLSA-200906-03 : phpMyAdmin: Multiple vulnerabilities
high Nessus Plugin ID 39570
Language:
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-200906-03 (phpMyAdmin: Multiple vulnerabilities)Multiple vulnerabilities have been reported in phpMyAdmin:
Greg Ose discovered that the setup script does not sanitize input properly, leading to the injection of arbitrary PHP code into the configuration file (CVE-2009-1151).
Manuel Lopez Gallego and Santiago Rodriguez Collazo reported that data from cookies used in the 'Export' page is not properly sanitized (CVE-2009-1150).
Impact :
A remote unauthorized attacker could exploit the first vulnerability to execute arbitrary code with the privileges of the user running phpMyAdmin and conduct Cross-Site Scripting attacks using the second vulnerability.
Workaround :
Removing the 'scripts/setup.php' file protects you from CVE-2009-1151.
Solution
All phpMyAdmin users should upgrade to the latest version:# emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/phpmyadmin-2.11.9.5'
See Also
Plugin Details
Severity: High
ID: 39570
File Name: gentoo_GLSA-200906-03.nasl
Version: 1.25
Type: local
Family: Gentoo Local Security Checks
Published: 6/30/2009
Updated: 12/5/2022
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.5
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:gentoo:linux:phpmyadmin, cpe:/o:gentoo:linux
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/29/2009
Vulnerability Publication Date: 3/26/2009
CISA Known Exploited Vulnerability Due Dates: 4/15/2022
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (PhpMyAdmin Config File Code Injection)
Elliot (Phpmyadmin File Upload)
Reference Information
CVE: CVE-2009-1150, CVE-2009-1151
BID: 34251