Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2015.0232
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2015-0232)
Zusammenfassung:	The remote host is missing an update for the 'phpmyadmin' package(s) announced via the MGASA-2015-0232 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'phpmyadmin' package(s) announced via the MGASA-2015-0232 advisory. Vulnerability Insight: Updated phpmyadmin package fixes security vulnerabilities: In phpMyAdmin before 4.2.13.3, by deceiving a user to click on a crafted URL, it is possible to alter the configuration file being generated with phpMyAdmin setup (CVE-2015-3902). In phpMyAdmin before 4.2.13.3, a vulnerability in the API call to GitHub can be exploited to perform a man-in-the-middle attack (CVE-2015-3903). With this update, the phpmyadmin package has been updated to the 4.2 branch, which has some additional changes and new features. The 4.1 branch is no longer supported. Affected Software/OS: 'phpmyadmin' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3902 BugTraq ID: 74657 http://www.securityfocus.com/bid/74657 Debian Security Information: DSA-3382 (Google Search) http://www.debian.org/security/2015/dsa-3382 http://www.securitytracker.com/id/1032404 SuSE Security Announcement: openSUSE-SU-2015:1191 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-07/msg00008.html Common Vulnerability Exposure (CVE) ID: CVE-2015-3903 BugTraq ID: 74660 http://www.securityfocus.com/bid/74660 Bugtraq: 20150514 phpMyAdmin 4.4.6 Man-In-the-Middle API Github (Google Search) http://www.securityfocus.com/archive/1/535547/100/0/threaded http://cxsecurity.com/issue/WLB-2015050095 http://packetstormsecurity.com/files/131954/phpMyAdmin-4.4.6-Man-In-The-Middle.html http://www.securitytracker.com/id/1032403
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.