Test ID:	1.3.6.1.4.1.25623.1.0.58666
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2007:199 (phpMyAdmin)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to phpMyAdmin announced via advisory MDKSA-2007:199. A number of vulnerabilities and security-related issues have been fixed in phpMyAdmin versions since the 2.9.1.1 release. This update provides version 2.11.1.2 which is the latest stable release of phpMyAdmin. Note that due to heavy configuration file changes, it may be necessary to reconfigure phpMyAdmin. The configuration file is located in /etc/phpMyAdmin/. In most cases, it should be sufficient so simply replace config.default.php with config.default.php.rpmnew and make whatever modifications are necessary. Affected: Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:199 Risk factor : Critical CVSS Score: 10.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0095 http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051544.html http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0034.html http://www.mandriva.com/security/advisories?name=MDKSA-2007:199 http://osvdb.org/33257 http://securityreason.com/securityalert/2104 XForce ISS Database: phpmyadmin-darkblueorange-path-disclosure(31223) https://exchange.xforce.ibmcloud.com/vulnerabilities/31223 Common Vulnerability Exposure (CVE) ID: CVE-2007-0203 BugTraq ID: 21987 http://www.securityfocus.com/bid/21987 http://osvdb.org/32666 http://secunia.com/advisories/23702 http://www.vupen.com/english/advisories/2007/0125 Common Vulnerability Exposure (CVE) ID: CVE-2007-0204 http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0 http://osvdb.org/32667 XForce ISS Database: phpmyadmin-unspecified-xss(31387) https://exchange.xforce.ibmcloud.com/vulnerabilities/31387 Common Vulnerability Exposure (CVE) ID: CVE-2007-1325 BugTraq ID: 22841 http://www.securityfocus.com/bid/22841 Debian Security Information: DSA-1370 (Google Search) http://www.us.debian.org/security/2007/dsa-1370 http://www.php-security.org/MOPB/MOPB-02-2007.html http://osvdb.org/36834 http://secunia.com/advisories/26733 http://www.vupen.com/english/advisories/2007/0831 Common Vulnerability Exposure (CVE) ID: CVE-2007-1395 Bugtraq: 20070307 xss in phpmyadmin >=2.8.0 and < 2.10.0 (Google Search) http://www.securityfocus.com/archive/1/462139/100/0/threaded http://www.virtuax.be/advisories/Advisory2-24012007.txt http://osvdb.org/35048 http://securityreason.com/securityalert/2402 XForce ISS Database: phpmyadmin-dbtable-xss(32858) https://exchange.xforce.ibmcloud.com/vulnerabilities/32858 Common Vulnerability Exposure (CVE) ID: CVE-2007-2245 http://osvdb.org/35050 http://secunia.com/advisories/24952 http://www.vupen.com/english/advisories/2007/1508 XForce ISS Database: phpmyadmin-fieldkey-xss(33898) https://exchange.xforce.ibmcloud.com/vulnerabilities/33898 Common Vulnerability Exposure (CVE) ID: CVE-2007-4306 BugTraq ID: 25268 http://www.securityfocus.com/bid/25268 http://pridels-team.blogspot.com/2007/08/phpmyadmin-multiple-xss-vuln.html Common Vulnerability Exposure (CVE) ID: CVE-2007-5386 BugTraq ID: 26020 http://www.securityfocus.com/bid/26020 Bugtraq: 20071015 about phpMyAdmin setup.php XSS vulnerability (Google Search) http://www.securityfocus.com/archive/1/482339/100/0/threaded Debian Security Information: DSA-1403 (Google Search) http://www.debian.org/security/2007/dsa-1403 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00040.html http://www.digitrustgroup.com/advisories/TDG-advisory071009a http://osvdb.org/37678 http://secunia.com/advisories/27173 http://secunia.com/advisories/27506 http://secunia.com/advisories/27595 http://www.vupen.com/english/advisories/2007/3469 XForce ISS Database: phpmyadmin-setup-xss(37077) https://exchange.xforce.ibmcloud.com/vulnerabilities/37077
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.