Test ID:	1.3.6.1.4.1.25623.1.0.59885
Category:	Fedora Local Security Checks
Title:	Fedora Core 8 FEDORA-2007-3636 (phpMyAdmin)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to phpMyAdmin announced via advisory FEDORA-2007-3636. phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats and is available in 50 languages ChangeLog: * Tue Nov 20 2007 Mike McGrath 2.11.2.1-1 - Upstream released new version * Mon Oct 29 2007 Mike McGrath 2.11.2-1 * upstream released new version * Mon Oct 22 2007 Mike McGrath 2.11.1.2-1 * upstream released new version References: [ 1 ] Bug #385901 - CVE-2007-5976 CVE-2007-5977 phpMyAdmin multiple vulnerabilities [f8] https://bugzilla.redhat.com/show_bug.cgi?id=385901 Updated packages: 5146e1a374655e3789ae5393f929167353a84b07 phpMyAdmin-2.11.2.1-1.fc8.noarch.rpm 006bef49b9929a5ef85def6ef4961d8e89a459f7 phpMyAdmin-2.11.2.1-1.fc8.src.rpm This update can be installed with the yum update program. Use su -c 'yum update phpMyAdmin' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. Solution: Apply the appropriate updates. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-3636 Risk factor : High CVSS Score: 6.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5976 BugTraq ID: 26512 http://www.securityfocus.com/bid/26512 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00777.html http://www.mandriva.com/security/advisories?name=MDKSA-2007:229 http://www.digitrustgroup.com/advisories/tdg-advisory071108a.html http://secunia.com/advisories/27630 http://secunia.com/advisories/27753 http://www.vupen.com/english/advisories/2007/3824 XForce ISS Database: phpmyadmin-dbcreate-sql-injection(38403) https://exchange.xforce.ibmcloud.com/vulnerabilities/38403 Common Vulnerability Exposure (CVE) ID: CVE-2007-5977 XForce ISS Database: phpmyadmin-dbcreate-xss(38404) https://exchange.xforce.ibmcloud.com/vulnerabilities/38404
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.