| Summary: | dev-db/phpmyadmin-2.7.0 Variable Overwrite Vulnerability | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Andreas Korthaus <akorthaus> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | normal | CC: | web-apps |
| Priority: | High | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://www.hardened-php.net/advisory_252005.110.html | ||
| Whiteboard: | B1 [ebuild] DerCorny | ||
| Package list: | Runtime testing required: | --- | |
web-apps, pls provide a fixed ebuild. *** This bug has been marked as a duplicate of 114662 *** It's another bug/release than #114662: 2.7.0-pl1 Ok, I was a bit fast there, but the other bug is already appropriately updated to take care of both issues. Thx for reporting. |
Advisory: phpMyAdmin Variable Overwrite Vulnerability Release Date: 2005/12/07 Last Modified: 2005/12/07 Author: Stefan Esser [sesser@hardened-php.net] Application: phpMyAdmin 2.7.0(-rc1) Severity: A flaw in the variable overwrite protection may lead to several XSS and local and remote file inclusion vulnerabilities Risk: Critical Vendor Status: Vendor has released an updated version References: http://www.hardened-php.net/advisory_252005.110.html phpMyAdmin relese notes: http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0