Test Kennung:	1.3.6.1.4.1.25623.1.0.60893
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: phpmyadmin
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: phpmyadmin CVE-2008-1567 phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1567 BugTraq ID: 28560 http://www.securityfocus.com/bid/28560 Debian Security Information: DSA-1557 (Google Search) http://www.debian.org/security/2008/dsa-1557 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00031.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00080.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:131 http://sourceforge.net/tracker/index.php?func=detail&aid=1909711&group_id=23067&atid=377408 http://secunia.com/advisories/29588 http://secunia.com/advisories/29613 http://secunia.com/advisories/29964 http://secunia.com/advisories/30816 http://secunia.com/advisories/32834 http://secunia.com/advisories/33822 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html SuSE Security Announcement: SUSE-SR:2009:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html http://www.vupen.com/english/advisories/2008/1037/references XForce ISS Database: phpmyadmin-sessiondata-info-disclosure(41541) https://exchange.xforce.ibmcloud.com/vulnerabilities/41541
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.