ID de Prueba:	1.3.6.1.4.1.25623.1.0.61633
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2008:202 (phpMyAdmin)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to phpMyAdmin announced via advisory MDVSA-2008:202. A few vulnerabilities and security-related issues have been fixed in phpMyAdmin since the 2.11.7 release. This update provides version 2.11.9.2 which is the latest stable release of phpMyAdmin and fixes CVE-2008-3197, CVE-2008-3456, CVE-2008-3457, and CVE-2008-4096. No configuration changes should be required since the previous update (version 2.11.7). If upgrading from older versions, it may be necessary to reconfigure phpMyAdmin. The configuration file is located in /etc/phpMyAdmin/. In most cases, it should be sufficient so simply replace config.default.php with config.default.php.rpmnew and make whatever modifications are necessary. Affected: Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2008:202 Risk factor : Critical CVSS Score: 8.5
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3197 Debian Security Information: DSA-1641 (Google Search) http://www.debian.org/security/2008/dsa-1641 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00652.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00590.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:202 http://yehg.net/lab/pr0js/advisories/XSRF_ConvertCharset_inPhpMyAdmin2.11.7.pdf http://yehg.net/lab/pr0js/advisories/XSRF_CreateDB_inPhpMyAdmin2.11.7.pdf http://www.openwall.com/lists/oss-security/2008/07/15/6 http://secunia.com/advisories/31097 http://secunia.com/advisories/31115 http://secunia.com/advisories/33822 SuSE Security Announcement: SUSE-SR:2009:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html http://www.vupen.com/english/advisories/2008/2116/references XForce ISS Database: phpmyadmin-multi-csrf(43846) https://exchange.xforce.ibmcloud.com/vulnerabilities/43846 Common Vulnerability Exposure (CVE) ID: CVE-2008-3456 BugTraq ID: 30420 http://www.securityfocus.com/bid/30420 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html http://yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf http://secunia.com/advisories/31263 http://secunia.com/advisories/31312 http://secunia.com/advisories/32834 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.vupen.com/english/advisories/2008/2226/references XForce ISS Database: phpmyadmin-multiple-weak-security(44050) https://exchange.xforce.ibmcloud.com/vulnerabilities/44050 Common Vulnerability Exposure (CVE) ID: CVE-2008-3457 http://yehg.net/lab/pr0js/advisories/XSS_inPhpMyAdmin2.11.7.pdf XForce ISS Database: phpmyadmin-setup-configinc-xss(44052) https://exchange.xforce.ibmcloud.com/vulnerabilities/44052 Common Vulnerability Exposure (CVE) ID: CVE-2008-4096 BugTraq ID: 31188 http://www.securityfocus.com/bid/31188 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01137.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01155.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01228.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg01290.html http://security.gentoo.org/glsa/glsa-200903-32.xml http://fd.the-wildcat.de/pma_e36a091q11.php http://www.openwall.com/lists/oss-security/2008/09/16/2 http://www.openwall.com/lists/oss-security/2008/09/15/2 http://www.nabble.com/phpMyAdmin-2.11.9.1-is-released-td19497113.html http://osvdb.org/48196 http://secunia.com/advisories/31884 http://secunia.com/advisories/31918 http://secunia.com/advisories/32034 http://www.vupen.com/english/advisories/2008/2585 http://www.vupen.com/english/advisories/2008/2619 XForce ISS Database: phpmyadmin-serverdatabases-code-execution(45157) https://exchange.xforce.ibmcloud.com/vulnerabilities/45157
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.