Test Kennung:	1.3.6.1.4.1.25623.1.0.55890
Kategorie:	SuSE Local Security Checks
Titel:	SuSE Security Advisory SUSE-SA:2005:066 (phpMyAdmin)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates announced in advisory SUSE-SA:2005:066. The MySQL configuration frontend phpMyAdmin was updated to fix the following security problems which can be remotely exploited: - Multiple cross-site scripting (XSS) bugs (CVE-2005-3301, CVE-2005-2869, PMASA-2005-5). - Multiple file inclusion vulnerabilities that allowed an attacker to include arbitrary files (CVE-2005-3300, CVE-2005-3301, PMASA-2005-5). Solution: Update your system with the packages as indicated in the referenced security advisory. http://www.securityspace.com/smysecure/catid.html?in=SUSE-SA:2005:066 Risk factor : Medium CVSS Score: 5.0
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2869 Debian Security Information: DSA-880 (Google Search) http://www.debian.org/security/2005/dsa-880 http://secunia.com/advisories/16605 http://secunia.com/advisories/17337 http://secunia.com/advisories/17559 http://secunia.com/advisories/17607 SuSE Security Announcement: SUSE-SA:2005:066 (Google Search) http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html SuSE Security Announcement: SUSE-SR:2005:026 (Google Search) SuSE Security Announcement: SUSE-SR:2005:028 (Google Search) http://www.novell.com/linux/security/advisories/2005_28_sr.html Common Vulnerability Exposure (CVE) ID: CVE-2005-3300 BugTraq ID: 15169 http://www.securityfocus.com/bid/15169 Bugtraq: 20051022 Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=113017591414699&w=2 http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478. http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml http://www.hardened-php.net/advisory_162005.73.html http://securitytracker.com/id?1015091 http://secunia.com/advisories/17289/ XForce ISS Database: phpmyadmin-multiple-scripts-file-include(22835) https://exchange.xforce.ibmcloud.com/vulnerabilities/22835 Common Vulnerability Exposure (CVE) ID: CVE-2005-3301 BugTraq ID: 15196 http://www.securityfocus.com/bid/15196 http://www.vupen.com/english/advisories/2005/2179
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.