phpMyAdmin Multiple Vulnerabilities

Posted on Saturday, July 30, 2011 @ 00:19:12 PDT in Security
by Raven

SECUNIA ADVISORY ID: SA45365

VERIFY ADVISORY: http://secunia.com/advisories/45365/

CRITICALITY: Highly Critical

RELEASE DATE: 2011-07-29

DESCRIPTION: Multiple vulnerabilities have been reported in phpMyAdmin, which can be exploited by malicious users to conduct cross-site scripting attacks and potentially compromise a vulnerable system and by malicious people to disclose potentially sensitive information and potentially compromise a vulnerable system.

1) Certain input passed to the table name in the table print view script is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Successful exploitation of this vulnerability requires that a specially crafted table name exists. The vulnerability is reported in version 3.4.3.1 and earlier.

2) Certain input passed to the MIME-type transformation parameter is not properly verified before being used to include files. This can be exploited to include arbitrary files from local resources. Successful exploitation of this vulnerability requires that the configuration storage mechanism is configured.

3) Certain input passed to an unspecified parameter in the 'relational schema' code is not properly sanitised before being used to concatenate a class name. This can be exploited to include arbitrary files from local resources. The vulnerabilities #2 and #3 are reported in version 3.4.0 through 3.4.3.1.

4) An unspecified error within the Swekey authentication can be exploited to overwrite session variables. This is related to SA45139 #1. The vulnerability is reported version 3.4.3.1 and earlier.

SOLUTION: Update to version 3.3.10.3 or 3.4.3.2.

PROVIDED AND/OR DISCOVERED BY:
1 - 3) The vendor credits Norman Hippert, The-Wildcat.de.
4) Frans Pehrson, Xxor AB.

ORIGINAL ADVISORY:
PMASA-2011-9: http://www.phpmyadmin.net/home_page/security/PMASA-2011-9.php
PMASA-2011-10: http://www.phpmyadmin.net/home_page/security/PMASA-2011-10.php
PMASA-2011-11: http://www.phpmyadmin.net/home_page/security/PMASA-2011-11.php
PMASA-2011-12: http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php
Frans Pehrson: http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt
 
 
click Related        click Share
 
 
Associated Topics

phpMyAdmin
 
News ©

Site Info v2.2.2

Last SeenLast Seen
Server TrafficServer Traffic
  • Total: 344,174,439
  • Today: 13,738
Server InfoServer Info
  • Dec 17, 2017
  • 06:09 am PST
 
 

Daily Inspiration