Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2014.0495
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2014-0495)
Zusammenfassung:	The remote host is missing an update for the 'phpmyadmin' package(s) announced via the MGASA-2014-0495 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'phpmyadmin' package(s) announced via the MGASA-2014-0495 advisory. Vulnerability Insight: Updated phpmyadmin package fixes security vulnerabilities: In phpMyAdmin before 4.1.14.7, with a crafted database, table or column name it is possible to trigger an XSS attack in the table browse page, with a crafted ENUM value it is possible to trigger XSS attacks in the table print view and zoom search pages, and with a crafted value for font size it is possible to trigger an XSS attack in the home page (CVE-2014-8958). In phpMyAdmin before 4.1.14.7, in the GIS editor feature, a parameter specifying the geometry type was not correctly validated, opening the door to a local file inclusion attack (CVE-2014-8959). In phpMyAdmin before 4.1.14.7, with a crafted file name it is possible to trigger an XSS in the error reporting page (CVE-2014-8960). In phpMyAdmin before 4.1.14.7, in the error reporting feature, a parameter specifying the file was not correctly validated, allowing the attacker to derive the line count of an arbitrary file (CVE-2014-8961). Affected Software/OS: 'phpmyadmin' package(s) on Mageia 3, Mageia 4. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8958 BugTraq ID: 71243 http://www.securityfocus.com/bid/71243 Debian Security Information: DSA-3382 (Google Search) http://www.debian.org/security/2015/dsa-3382 https://security.gentoo.org/glsa/201505-03 http://www.mandriva.com/security/advisories?name=MDVSA-2014:228 SuSE Security Announcement: openSUSE-SU-2014:1561 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html Common Vulnerability Exposure (CVE) ID: CVE-2014-8959 BugTraq ID: 71247 http://www.securityfocus.com/bid/71247 Common Vulnerability Exposure (CVE) ID: CVE-2014-8960 BugTraq ID: 71244 http://www.securityfocus.com/bid/71244 Common Vulnerability Exposure (CVE) ID: CVE-2014-8961 BugTraq ID: 71245 http://www.securityfocus.com/bid/71245
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.