Test Kennung:	1.3.6.1.4.1.25623.1.0.70802
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 201201-01 (phpMyAdmin)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 201201-01.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 201201-01. Vulnerability Insight: Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code. Solution: All phpMyAdmin users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-db/phpmyadmin-3.4.9' CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-7251 BugTraq ID: 37826 http://www.securityfocus.com/bid/37826 Debian Security Information: DSA-2034 (Google Search) http://www.debian.org/security/2010/dsa-2034 http://secunia.com/advisories/38211 http://secunia.com/advisories/39503 SuSE Security Announcement: SUSE-SR:2010:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html http://www.vupen.com/english/advisories/2010/0910 Common Vulnerability Exposure (CVE) ID: CVE-2008-7252 Common Vulnerability Exposure (CVE) ID: CVE-2010-2958 http://www.openwall.com/lists/oss-security/2010/09/01/2 http://www.openwall.com/lists/oss-security/2010/09/01/3 http://secunia.com/advisories/41206 http://www.vupen.com/english/advisories/2010/2242 Common Vulnerability Exposure (CVE) ID: CVE-2010-3055 BugTraq ID: 42591 http://www.securityfocus.com/bid/42591 Debian Security Information: DSA-2097 (Google Search) http://www.debian.org/security/2010/dsa-2097 http://www.mandriva.com/security/advisories?name=MDVSA-2010:163 http://secunia.com/advisories/41058 http://secunia.com/advisories/41185 http://www.vupen.com/english/advisories/2010/2223 http://www.vupen.com/english/advisories/2010/2231 Common Vulnerability Exposure (CVE) ID: CVE-2010-3056 BugTraq ID: 42584 http://www.securityfocus.com/bid/42584 http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045991.html http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045997.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:164 http://yehg.net/lab/pr0js/advisories/phpmyadmin/%5Bphpmyadmin-3.3.5%5D_cross_site_scripting%28XSS%29 http://secunia.com/advisories/41000 Common Vulnerability Exposure (CVE) ID: CVE-2010-3263 http://www.mandriva.com/security/advisories?name=MDVSA-2010:186 http://secunia.com/advisories/41210 XForce ISS Database: phpmyadmin-uns-xss(61675) https://exchange.xforce.ibmcloud.com/vulnerabilities/61675 Common Vulnerability Exposure (CVE) ID: CVE-2011-0986 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.html http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:026 http://secunia.com/advisories/43478 http://www.vupen.com/english/advisories/2011/0385 XForce ISS Database: phpmyadmin-readme-path-disclosure(65424) https://exchange.xforce.ibmcloud.com/vulnerabilities/65424 Common Vulnerability Exposure (CVE) ID: CVE-2011-0987 BugTraq ID: 46359 http://www.securityfocus.com/bid/46359 Debian Security Information: DSA-2167 (Google Search) http://www.debian.org/security/2011/dsa-2167 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054525.html http://secunia.com/advisories/43324 http://secunia.com/advisories/43391 http://www.vupen.com/english/advisories/2011/0381 http://www.vupen.com/english/advisories/2011/0409 http://www.vupen.com/english/advisories/2011/0512 http://www.vupen.com/english/advisories/2011/0570 XForce ISS Database: phpmyadmin-bookmark-security-bypass(65390) https://exchange.xforce.ibmcloud.com/vulnerabilities/65390 Common Vulnerability Exposure (CVE) ID: CVE-2011-2505 Bugtraq: 20110707 phpMyAdmin 3.x Multiple Remote Code Executions (Google Search) http://www.securityfocus.com/archive/1/518804/100/0/threaded Debian Security Information: DSA-2286 (Google Search) http://www.debian.org/security/2011/dsa-2286 http://www.exploit-db.com/exploits/17514/ http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt http://www.openwall.com/lists/oss-security/2011/06/28/2 http://www.openwall.com/lists/oss-security/2011/06/28/6 http://www.openwall.com/lists/oss-security/2011/06/28/8 http://www.openwall.com/lists/oss-security/2011/06/29/11 http://www.osvdb.org/73611 http://secunia.com/advisories/45139 http://secunia.com/advisories/45292 http://secunia.com/advisories/45315 http://securityreason.com/securityalert/8306 Common Vulnerability Exposure (CVE) ID: CVE-2011-2506 http://www.osvdb.org/73612 Common Vulnerability Exposure (CVE) ID: CVE-2011-2507 http://0x6a616d6573.blogspot.com/2011/07/phpmyadmin-fud.html http://ha.xxor.se/2011/07/phpmyadmin-3x-pregreplace-rce-poc.html http://www.osvdb.org/73613 Common Vulnerability Exposure (CVE) ID: CVE-2011-2508 http://www.osvdb.org/73614 Common Vulnerability Exposure (CVE) ID: CVE-2011-2642 BugTraq ID: 48874 http://www.securityfocus.com/bid/48874 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html http://secunia.com/advisories/45365 http://secunia.com/advisories/45515 XForce ISS Database: phpmyadmin-table-print-xss(68750) https://exchange.xforce.ibmcloud.com/vulnerabilities/68750 Common Vulnerability Exposure (CVE) ID: CVE-2011-2643 XForce ISS Database: phpmyadmin-mimetype-file-include(68767) https://exchange.xforce.ibmcloud.com/vulnerabilities/68767 Common Vulnerability Exposure (CVE) ID: CVE-2011-2718 45365 45515 48874 74111 http://osvdb.org/74111 FEDORA-2011-9725 FEDORA-2011-9734 MDVSA-2011:124 [oss-security] 20110725 CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12 http://www.openwall.com/lists/oss-security/2011/07/25/4 [oss-security] 20110726 Re: CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12 http://www.openwall.com/lists/oss-security/2011/07/26/10 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=3ae58f0cd6b89ad4767920f9b214c38d3f6d4393 http://www.phpmyadmin.net/home_page/security/PMASA-2011-11.php https://bugzilla.redhat.com/show_bug.cgi?id=725383 phpmyadmin-schema-file-include(68768) https://exchange.xforce.ibmcloud.com/vulnerabilities/68768 Common Vulnerability Exposure (CVE) ID: CVE-2011-2719 20110724 phpMyAdmin 3.x Conditional Session Manipulation http://seclists.org/fulldisclosure/2011/Jul/300 http://www.securityfocus.com/archive/1/518967/100/0/threaded 20110804 Re: [Full-disclosure] phpMyAdmin 3.x Conditional Session Manipulation http://www.securityfocus.com/archive/1/519155/100/0/threaded 45315 74112 http://osvdb.org/74112 8322 http://securityreason.com/securityalert/8322 DSA-2286 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=571cdc6ff4bf375871b594f4e06f8ad3159d1754 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7 http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt https://bugzilla.redhat.com/show_bug.cgi?id=725384 phpmyadmin-swekey-file-overwrite(68769) https://exchange.xforce.ibmcloud.com/vulnerabilities/68769 Common Vulnerability Exposure (CVE) ID: CVE-2011-3646 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069235.html http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069237.html http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069234.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:158 http://secunia.com/advisories/46874 Common Vulnerability Exposure (CVE) ID: CVE-2011-4064 BugTraq ID: 50175 http://www.securityfocus.com/bid/50175 http://securitytracker.com/id?1026199 Common Vulnerability Exposure (CVE) ID: CVE-2011-4107 20111102 PhpMyAdmin Arbitrary File Reading http://seclists.org/fulldisclosure/2011/Nov/21 46447 http://secunia.com/advisories/46447 50497 http://www.securityfocus.com/bid/50497 76798 http://osvdb.org/76798 8533 http://securityreason.com/securityalert/8533 DSA-2391 http://www.debian.org/security/2012/dsa-2391 FEDORA-2011-15831 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069649.html FEDORA-2011-15841 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069625.html FEDORA-2011-15846 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069635.html MDVSA-2011:198 http://www.mandriva.com/security/advisories?name=MDVSA-2011:198 [oss-security] 20111103 CVE Request -- phpMyAdmin -- Arbitrary local file read flaw by loading XML strings / importing XML files http://www.openwall.com/lists/oss-security/2011/11/03/3 [oss-security] 20111103 Re: CVE Request -- phpMyAdmin -- Arbitrary local file read flaw by loading XML strings / importing XML files http://www.openwall.com/lists/oss-security/2011/11/03/5 http://packetstormsecurity.org/files/view/106511/phpmyadmin-fileread.txt http://www.phpmyadmin.net/home_page/security/PMASA-2011-17.php http://www.wooyun.org/bugs/wooyun-2010-03185 https://bugzilla.redhat.com/show_bug.cgi?id=751112 phpmyadmin-xml-info-disclosure(71108) https://exchange.xforce.ibmcloud.com/vulnerabilities/71108 Common Vulnerability Exposure (CVE) ID: CVE-2011-4634 http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071040.html Common Vulnerability Exposure (CVE) ID: CVE-2011-4780 BugTraq ID: 51226 http://www.securityfocus.com/bid/51226 http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071537.html http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071523.html Common Vulnerability Exposure (CVE) ID: CVE-2011-4782 XForce ISS Database: phpmyadmin-configfileclass-xss(71938) https://exchange.xforce.ibmcloud.com/vulnerabilities/71938
Copyright	Copyright (C) 2012 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.