Detections
Analytics

openSUSE Security Update : phpMyAdmin (openSUSE-2012-18)

medium Nessus Plugin ID 74585

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

- update to 3.4.9

 - bug #3442028 [edit] Inline editing enum fields with null shows no dropdown

 - bug #3442004 [interface] DB suggestion not correct for user with underscore

 - bug #3438420 [core] Magic quotes removed in PHP 5.4

 - bug #3398788 [session] No feedback when result is empty (signon auth_type)

 - bug #3384035 [display] Problems regarding ShowTooltipAliasTB

 - bug #3306875 [edit] Can't rename a database that contains views

 - bug #3452506 [edit] Unable to move tables with triggers

 - bug #3449659 [navi] Fast filter broken with table tree

 - bug #3448485 [GUI] Firefox favicon frameset regression

 - [core] Better compatibility with mysql extension

 - [security] Self-XSS on export options (export server/database/table), see PMASA-2011-20

 - [security] Self-XSS in setup (host parameter), see PMASA-2011-19

 - fix for bnc#738411

 - PMASA-2011-19 (CVE-2011-4780)

 - PMASA-2011-20 (CVE-2011-4782)

 - rework config patch

Solution

Update the affected phpMyAdmin package.

See Also

https://bugzilla.novell.com/show_bug.cgi?id=738411

Plugin Details

Severity: Medium

ID: 74585

File Name: openSUSE-2012-18.nasl

Version: 1.3

Type: local

Agent: unix

Published: 6/13/2014

Updated: 1/19/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.8

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:phpmyadmin, cpe:/o:novell:opensuse:12.1

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 1/4/2012

Reference Information

CVE: CVE-2011-4780, CVE-2011-4782