Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 215692 - dev-db/phpmyadmin < Local session data disclosure (CVE-2008-1567)
Summary: dev-db/phpmyadmin < Local session data disclosure (CVE-2008-1567)
Status: RESOLVED DUPLICATE of bug 215502
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo Security
Whiteboard: B3 [ebuild]
Depends on:
Reported: 2008-04-01 13:01 UTC by Robert Buchholz (RETIRED)
Modified: 2008-04-01 13:10 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Robert Buchholz (RETIRED) gentoo-dev 2008-04-01 13:01:48 UTC
CVE-2008-1567 (
  phpMyAdmin before stores the (1) MySQL username, (2) password, and
  the (2) Blowfish secret key in plaintext in the /tmp Session file, which
  allows local users to obtain sensitive information.
Comment 1 Robert Buchholz (RETIRED) gentoo-dev 2008-04-01 13:10:00 UTC

*** This bug has been marked as a duplicate of bug 215502 ***