Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2014.0099
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2014-0099)
Zusammenfassung:	The remote host is missing an update for the 'phpmyadmin, phpseclib' package(s) announced via the MGASA-2014-0099 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'phpmyadmin, phpseclib' package(s) announced via the MGASA-2014-0099 advisory. Vulnerability Insight: Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action (CVE-2014-1879). This upgrade provides the latest phpmyadmin version (4.1.8) to address this vulnerability. Additionally the phpseclib package has been added in Mageia 3 and updated in Mageia 4, due to new dependencies. Affected Software/OS: 'phpmyadmin, phpseclib' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1879 BugTraq ID: 65717 http://www.securityfocus.com/bid/65717 http://secunia.com/advisories/59832 SuSE Security Announcement: openSUSE-SU-2014:0344 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00017.html
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.