Test Kennung:	1.3.6.1.4.1.25623.1.0.54629
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200407-22 (dev-db/phpmyadmin)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory GLSA 200407-22. Multiple vulnerabilities in phpMyAdmin may allow a remote attacker with a valid user account to alter configuration variables and execute arbitrary PHP code. Solution: All phpMyAdmin users should upgrade to the latest version: # emerge sync # emerge -pv '>=dev-db/phpmyadmin-2.5.7_p1' # emerge '>=dev-db/phpmyadmin-2.5.7_p1' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200407-22 http://bugs.gentoo.org/show_bug.cgi?id=57890 http://www.securityfocus.com/archive/1/367486 CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2631 BugTraq ID: 10629 http://www.securityfocus.com/bid/10629 Bugtraq: 20040628 php codes injection in phpMyAdmin version 2.5.7. (Google Search) http://archives.neohapsis.com/archives/bugtraq/2004-06/0444.html Bugtraq: 20040630 Re: php codes injection in phpMyAdmin version 2.5.7. (Google Search) http://archives.neohapsis.com/archives/bugtraq/2004-06/0473.html Bugtraq: 20041018 phpMyAdmin: Vulnerability in MIME-based transformation (Google Search) http://marc.info/?l=bugtraq&m=109816584519779&w=2 http://www.gentoo.org/security/en/glsa/glsa-200407-22.xml http://eagle.kecapi.com/sec/fd/phpMyAdmin.html http://www.securiteam.com/unixfocus/5QP040ADFW.html http://www.osvdb.org/7314 http://securitytracker.com/id?1010614 http://secunia.com/advisories/11974 XForce ISS Database: phpmyadmin-php-injection(16542) https://exchange.xforce.ibmcloud.com/vulnerabilities/16542 Common Vulnerability Exposure (CVE) ID: CVE-2004-2632 http://www.osvdb.org/7315 http://securitytracker.com/alerts/2004/Jun/1010614.html XForce ISS Database: phpmyadmin-code-manipulation(16555) https://exchange.xforce.ibmcloud.com/vulnerabilities/16555
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.