phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.

This update of phpMyAdmin fixes the following bugs :

  - CVE-2008-1149: SQL injection, CSRF attacks using crafted     cookies

  - CVE-2008-1567: local users can steal session     information/credentials

  - CVE-2008-1924: in a shared host environment users with     CREAT permissions can read arbitrary files

  - CVE-2008-3456: cross-site framing attack

  - CVE-2008-3457: user-assisted XSS attack

Several remote vulnerabilities have been discovered in phpMyAdmin, a tool to administrate MySQL databases over the web. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2008-4096     Remote authenticated users could execute arbitrary code     on the host running phpMyAdmin through manipulation of a     script parameter.

  - CVE-2008-3457     Cross site scripting through the setup script was     possible in rare circumstances.

  - CVE-2008-3456     Protection has been added against remote websites     loading phpMyAdmin into a frameset.

  - CVE-2008-3197     Cross site request forgery allowed remote attackers to     create a new database, but not perform any other action     on it.

This update solves PMASA-2008-6 (phpMyAdmin security announcement) from 2008-07-28: Cross-site Framing; XSS in setup.php; see http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6 - [interface] Table list pagination in navi - [profiling] Profiling causes query to be executed again (really causes a problem in case of INSERT/UPDATE) - [import] SQL file import very slow on Windows - [XHTML] problem with tabindex and radio fields - [interface] tabindex not set correctly - [views] VIEW name created via the GUI was not protected with backquotes - [interface] Deleting multiple views (space in name) - [parser] SQL parser removes essential space - [export] CSV for MS Excel incorrect escaping of double quotes - [interface] Font size option problem when no config file - [relation] Relationship view should check for changes - [history] Do not save too big queries in history - [security] Do not show version info on login screen - [import] Potential data loss on import resubmit - [export] Safari and timedate - [import, export] Import/Export fails because of Mac files - [security] protection against cross- frame scripting and new directive AllowThirdPartyFraming - [security] possible XSS during setup - [interface] revert language changing problem introduced with 2.11.7.1 phpMyAdmin 2.11.8.1 is a bugfix-only version containing normal bug fixes and two security fixes. This version is identical to 2.11.8, except it includes a fix for a notice about 'lang'.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
34813	openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-5781)	Nessus	SuSE Local Security Checks	medium
34254	Debian DSA-1641-1 : phpmyadmin - several vulnerabilities	Nessus	Debian Local Security Checks	high
33769	Fedora 9 : phpMyAdmin-2.11.8.1-1.fc9 (2008-6868)	Nessus	Fedora Local Security Checks	medium
33765	Fedora 8 : phpMyAdmin-2.11.8.1-1.fc8 (2008-6810)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2008-3456

medium

Tenable Plugins

medium

high

medium

medium