drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in phpMyAdmin
Name: |
Ausführen beliebiger Kommandos in phpMyAdmin |
|
ID: |
DSA-2167-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian lenny, Debian squeeze |
|
Datum: |
Mi, 16. Februar 2011, 23:29 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0987 |
|
Applikationen: |
phpMyAdmin |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
- ------------------------------------------------------------------------- Debian Security Advisory DSA-2167-1 security@debian.org http://www.debian.org/security/ Thijs Kinkhorst February 16, 2011 http://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : phpmyadmin Vulnerability : sql injection Problem type : remote Debian-specific: no CVE ID : CVE-2011-0987
It was discovered that phpMyAdmin, a a tool to administer MySQL over the web, when the bookmarks feature is enabled, allowed to create a bookmarked query which would be executed unintentionally by other users.
For the oldstable distribution (lenny), this problem has been fixed in version 4:2.11.8.1-5+lenny8.
For the stable distribution (squeeze), this problem has been fixed in version 4:3.3.7-5.
For the testing distribution (wheezy) and unstable distribution (sid), this problem has been fixed in version 4:3.3.9.2-1.
We recommend that you upgrade your phpmyadmin packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux)
iQEcBAEBAgAGBQJNXBLYAAoJEOxfUAG2iX57PAUH/3WO+oTC931ZOM8yJAjF5iOL aQk5VVYYmtzvLSR/eevGSb2WgTiWFtPCO1fUP7dJk9YdxpxmtgiIE54QEwOxveUt wcNkXkytK4n7gC+y/8jqgviorbFQf5qUD2akDQ8kWMM5whwJCQOVuwk8Fn7qWP4l 8NmqeR0HVYdR3LGa+yG545EuO3kLYp2vka10s9ZicACH4r/lMDglWTpAfzSci0gR u4acRHgNLHIfjO5Lqac45vUkkDoOwrNWbLRWmuq3nsNIWHOBOGECmJdgttEpLU9E aUSD2IzBBh78vSFLwds4V0lHnca3ABv2yFymsRP0mAEsxezNsWqPxT5E7cHQlEI= =luQx -----END PGP SIGNATURE-----
-- To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: http://lists.debian.org/20110216181032.CC789327B72@morgana.loeki.tv
|
|
|
|