Gentoo Archives: gentoo-announce

From: Thierry Carrez <koon@g.o>
To: gentoo-announce@l.g.o
Cc: bugtraq@×××××××××××××.com, full-disclosure@××××××××××××.com, security-alerts@×××××××××××××.com
Subject: [gentoo-announce] [ GLSA 200410-14 ] phpMyAdmin: Vulnerability in MIME-based transformation system
Date: Mon, 18 Oct 2004 11:48:39
Message-Id: 4173AC76.5080301@gentoo.org
1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2 Gentoo Linux Security Advisory GLSA 200410-14
3 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
4 http://security.gentoo.org/
5 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
6
7 Severity: High
8 Title: phpMyAdmin: Vulnerability in MIME-based transformation
9 system
10 Date: October 18, 2004
11 Bugs: #67409
12 ID: 200410-14
13
14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
15
16 Synopsis
17 ========
18
19 A vulnerability has been found in the MIME-based transformation system
20 of phpMyAdmin, which may allow remote execution of arbitrary commands
21 if PHP's "safe mode" is disabled.
22
23 Background
24 ==========
25
26 phpMyAdmin is a popular web-based MySQL administration tool written in
27 PHP. It allows users to browse and administer a MySQL database from a
28 web-browser. Transformations are a phpMyAdmin feature allowing plug-ins
29 to rewrite the contents of any column seen in phpMyAdmin's Browsing
30 mode, including using insertion of PHP or JavaScript code.
31
32 Affected packages
33 =================
34
35 -------------------------------------------------------------------
36 Package / Vulnerable / Unaffected
37 -------------------------------------------------------------------
38 1 dev-db/phpmyadmin < 2.6.0_p2 >= 2.6.0_p2
39
40 Description
41 ===========
42
43 A defect was found in phpMyAdmin's MIME-based transformation system,
44 when used with "external" transformations.
45
46 Impact
47 ======
48
49 A remote attacker could exploit this vulnerability to execute arbitrary
50 commands on the server with the rights of the HTTP server user.
51
52 Workaround
53 ==========
54
55 Enabling PHP safe mode ("safe_mode = On" in php.ini) may serve as a
56 temporary workaround.
57
58 Resolution
59 ==========
60
61 All phpMyAdmin users should upgrade to the latest version:
62
63 # emerge sync
64
65 # emerge -pv ">=dev-db/phpmyadmin-2.6.0_p2"
66 # emerge ">=dev-db/phpmyadmin-2.6.0_p2"
67
68 References
69 ==========
70
71 [ 1 ] phpMyAdmin 2.6.0_pl2 Release Announcement
72 http://sourceforge.net/forum/forum.php?forum_id=414281
73 [ 2 ] Secunia Advisory SA12813
74 http://secunia.com/advisories/12813/
75
76 Availability
77 ============
78
79 This GLSA and any updates to it are available for viewing at
80 the Gentoo Security Website:
81
82 http://security.gentoo.org/glsa/glsa-200410-14.xml
83
84 Concerns?
85 =========
86
87 Security is a primary focus of Gentoo Linux and ensuring the
88 confidentiality and security of our users machines is of utmost
89 importance to us. Any security concerns should be addressed to
90 security@g.o or alternatively, you may file a bug at
91 http://bugs.gentoo.org.
92
93 License
94 =======
95
96 Copyright 2004 Gentoo Foundation, Inc; referenced text
97 belongs to its owner(s).
98
99 The contents of this document are licensed under the
100 Creative Commons - Attribution / Share Alike license.
101
102 http://creativecommons.org/licenses/by-sa/1.0

Attachments

File name MIME type
signature.asc application/pgp-signature