CVE-2008-1567
CVE-2008-1567
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information.
CVSS 5.5 · Media · EPSS 0,3% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
phpmyadmin Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.11.5.1
Actualiza a 2.11.5.1
phpmyadmin Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.11.5.1
Actualiza a 2.11.5.1
phpmyadmin Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.11.5.1
Actualiza a 2.11.5.1
Fuentes originales
- http://www.securityfocus.com/bid/28560
- http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
- http://www.debian.org/security/2008/dsa-1557
- http://secunia.com/advisories/32834
- http://secunia.com/advisories/29964
- http://secunia.com/advisories/30816
- http://sourceforge.net/tracker/index.php?func=detail&aid=1909711&group_id=23067&atid=377408
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00080.html
- http://secunia.com/advisories/29613
- http://secunia.com/advisories/29588
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00031.html
- http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-2
- http://secunia.com/advisories/33822
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41541
- http://www.vupen.com/english/advisories/2008/1037/references
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:131
- https://nvd.nist.gov/vuln/detail/CVE-2008-1567